level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.113306ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="46.831µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.179476ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="27.571µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.913639ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.38µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.831µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="66.191µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="68.721µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="90.432µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="482.781µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.71µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.713832ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.784292ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.821µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.731µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="174.314µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.502µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="88.372µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=117.285619ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="90.632µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="17.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.192.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=204.14025ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.899547ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.647533ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.721µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.19µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="94.202µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="265.156µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.241µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="204.175µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="700.617µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.074274ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.26µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.431µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.192 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.192 ipAddr.ipv6="" k8sNodeIP=199.19.213.192 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.192" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.58" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.192" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.192} {CiliumInternalIP 10.0.0.58}] 10.0.0.0/24 [] [] 10.0.0.88 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35079" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.51395898s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="27.59µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="11.33µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="55.082µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="7.48µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.756250683s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=318.270607ms file-path=/var/run/cilium/state/templates/07d5f6e8d87458efb9ee73aca596444c3524e28f49a396fad67780799ac41a39/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=481 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="reserved:health" ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=4 identityLabels="reserved:health" ipv4=10.0.0.88 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.196209352s file-path=/var/run/cilium/state/templates/aa6f63aa13dab0ab588216c8c25e9e95f4cabbc104d3f830a711244fc879bdb4/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.17 93c07fd4-c5b8-426a-a53d-1d6f57afa6b9 default }" containerID=5408b3ad83b4a57b67eca34bc5fde067a78f50a2208e7642eb0e4eaa9539be95 datapathConfiguration="&{false false false false false }" interface=lxca12957c670bc k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.72 3e02391d-546d-437b-9d4b-d1aad9888759 default }" containerID=2b33e7fb61768e10493bc2eb0082aa78931a1dcddcc761ddebc23b4824ef42ad datapathConfiguration="&{false false false false false }" interface=lxcc487a08b8514 k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5408b3ad83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb subsys=endpoint level=info msg="New endpoint" containerID=2b33e7fb61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5408b3ad83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b33e7fb61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2b33e7fb61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5408b3ad83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5408b3ad83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=20356 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5408b3ad83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=20356 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b33e7fb61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=4174 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b33e7fb61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=4174 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=355 identity=4 ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5408b3ad83 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=563 identity=20356 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5408b3ad83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=20356 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b33e7fb61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1139 identity=4174 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b33e7fb61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1139 identity=4174 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5408b3ad83 endpointID=563 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-k7nkb subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a85329d4-f76d-40d9-b85b-e3a1eb95a97c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=5408b3ad83 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=20356 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k7nkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 40ceeae8-fe7a-46ac-8da1-d82f8f8c39cf default }" containerID=eb16aff10f39d20293fbc6a1d0683f656b00527bc59b66f39c1f5e902e408fb3 datapathConfiguration="&{false false false false false }" interface=lxc583e655f89d1 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb16aff10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 ipv4=10.0.0.131 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb16aff10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.131 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb16aff10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=11689 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.131 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eb16aff10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2047 identity=11689 ipv4=10.0.0.131 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb16aff10f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2047 identity=11689 ipv4=10.0.0.131 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb16aff10f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2047 identity=11689 ipv4=10.0.0.131 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5ng6v subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00481 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00481 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00481 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00481:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=481 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 615cefa4-27e7-4555-8892-ef3e12bdbce0 default }" containerID=0a8249298d9346fc93746afccfe74094162dca22d32266e39456c3f9ebad48e1 datapathConfiguration="&{false false false false false }" interface=lxc1915c16609f0 k8sPodName=kube-system/coredns-67659f764b-kt7k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a8249298d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 ipv4=10.0.0.50 ipv6= k8sPodName=kube-system/coredns-67659f764b-kt7k5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a8249298d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.50 ipv6= k8sPodName=kube-system/coredns-67659f764b-kt7k5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0a8249298d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identity=4174 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.50 ipv6= k8sPodName=kube-system/coredns-67659f764b-kt7k5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a8249298d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identity=4174 ipv4=10.0.0.50 ipv6= k8sPodName=kube-system/coredns-67659f764b-kt7k5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a8249298d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2011 identity=4174 ipv4=10.0.0.50 ipv6= k8sPodName=kube-system/coredns-67659f764b-kt7k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a8249298d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2011 identity=4174 ipv4=10.0.0.50 ipv6= k8sPodName=kube-system/coredns-67659f764b-kt7k5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 1afdc7ce-eba7-4651-b8f2-6488f57faab8 default }" containerID=2d0d38b9a097a53c725ef985f9289aedc4a2387c08f2891d942b624592f00cc3 datapathConfiguration="&{false false false false false }" interface=lxc2cf8a986138b k8sPodName=kube-system/coredns-67659f764b-fsc6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d0d38b9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-fsc6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d0d38b9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-fsc6r subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2d0d38b9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=4174 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-fsc6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d0d38b9a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=4174 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-fsc6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d0d38b9a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=128 identity=4174 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-fsc6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d0d38b9a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=128 identity=4174 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-fsc6r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.85 d9ae5ef2-a568-432b-aebc-e6144aa34f65 default }" containerID=4172fb68471d2f1dc3a372542332096a120fbd3bbfdc3ef3b675d002abd957cb datapathConfiguration="&{false false false false false }" interface=lxca1a49922a766 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4172fb6847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4172fb6847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4172fb6847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=33992 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4172fb6847 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2250 identity=33992 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4172fb6847 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2250 identity=33992 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4172fb6847 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2250 identity=33992 ipv4=10.0.0.85 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rr2rc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b33e7fb61 endpointID=1139 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-bt4d7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=2b33e7fb61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1139 identity=4174 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-bt4d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 0d4eff79-5b7b-4c0d-a67e-26159d71b03c default }" containerID=8f60a75313b9904b931e9e4435efec77cc9bb8d54fe164fdb588a2da63ce8b4d datapathConfiguration="&{false false false false false }" interface=lxc37b22f49bf5d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f60a75313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 f52fb1f6-ab53-4e06-92cf-3c9885dbe9ab default }" containerID=aab0d52dcf81d465ab0d8309d6abf1cd6a27138786b2aea7a3c23a01b5e1cf82 datapathConfiguration="&{false false false false false }" interface=lxcc56624cf4290 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aab0d52dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f60a75313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=aab0d52dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aab0d52dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8f60a75313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8f60a75313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=10853 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f60a75313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=10853 ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aab0d52dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=5698 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aab0d52dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=5698 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 2b2015bb-9d54-45b5-a184-29abb45b7c10 default }" containerID=78915bc1cfdff9d0458134c4d4c2769c7c1cb9f031a02fdd16079609458f4fbe datapathConfiguration="&{false false false false false }" interface=lxc543f524b79fa k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78915bc1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78915bc1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78915bc1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 identity=16286 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78915bc1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2157 identity=16286 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f60a75313 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=25 identity=10853 ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f60a75313 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=25 identity=10853 ipv4=10.0.0.17 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9d478 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aab0d52dcf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=500 identity=5698 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aab0d52dcf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=5698 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fqnb2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=78915bc1cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2157 identity=16286 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp subsys=endpoint level=info msg="Successful endpoint creation" containerID=78915bc1cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2157 identity=16286 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-jh2vp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 079662de-fd96-40dc-9ed2-0707d5f20f3f default }" containerID=f93c985b418b5cc4c2d346f97c1b869d92e49c7ea03c59cf91d2a8d2c9be2435 datapathConfiguration="&{false false false false false }" interface=lxc2d1f880bc9d4 k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f93c985b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f93c985b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f93c985b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=34648 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f93c985b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=34648 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f93c985b41 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3007 identity=34648 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f93c985b41 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3007 identity=34648 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f93c985b41 endpointID=3007 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-n8ddz subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=0f5c0b93-fd30-44a5-af00-f3b72d0d7c78 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f93c985b41 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3007 identity=34648 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8ddz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 0be3441e-5950-474b-96d6-7965dc8ad6e0 default }" containerID=6e77720e2fd564fc89ed009b4ca2f9279b49a6c5f92a268f66779660262ac006 datapathConfiguration="&{false false false false false }" interface=lxc9b6be4f9c940 k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e77720e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e77720e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=31218763-02c6-4377-a6aa-21a3513609c1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=31218763-02c6-4377-a6aa-21a3513609c1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=31218763-02c6-4377-a6aa-21a3513609c1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=31218763-02c6-4377-a6aa-21a3513609c1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e77720e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identity=12552 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=31218763-02c6-4377-a6aa-21a3513609c1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=31218763-02c6-4377-a6aa-21a3513609c1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6e77720e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identity=12552 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e77720e2f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3263 identity=12552 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e77720e2f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3263 identity=12552 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e77720e2f endpointID=3263 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rqdq7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=31218763-02c6-4377-a6aa-21a3513609c1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=31218763-02c6-4377-a6aa-21a3513609c1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=6e77720e2f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3263 identity=12552 ipv4=10.0.0.101 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rqdq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 4416433e-9fbf-4024-8eab-aa26312d5baa default }" containerID=4666711fe5a8a189b552bc7886cae23e3cfe6cae7574d1530c4b45ec115bbbdd datapathConfiguration="&{false false false false false }" interface=lxc9b9ac2a8d83c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4666711fe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4666711fe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4666711fe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=1727 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4666711fe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=1727 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4666711fe5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=294 identity=1727 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4666711fe5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=294 identity=1727 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8k6l6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 01cd45e3-f8ab-466f-a257-23cbdc227580 default }" containerID=67375aff812b992b60afa34a7c3affc87e31aa4fdc0779bb34d2b239fb0952fe datapathConfiguration="&{false false false false false }" interface=lxc1abc4e6bb685 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67375aff81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67375aff81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67375aff81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=2567 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67375aff81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=2567 ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67375aff81 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2693 identity=2567 ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=67375aff81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=2567 ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67375aff81 endpointID=2693 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-p9kdp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e6052c91-ad47-4edd-846a-3e9d5765dd2b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=67375aff81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=2567 ipv4=10.0.0.246 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p9kdp subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3b65f7a3-3662-46c6-a348-9cc711c14b70] Description:}]" policyAddRequest=0bb51c26-ca69-486f-9a72-944d61e895cb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0bb51c26-ca69-486f-9a72-944d61e895cb policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4fa13100-6db0-4311-9176-5e3050e637c9] Description:}]" policyAddRequest=2821f688-58d0-4b4d-abc6-9a9ac4ab604d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2821f688-58d0-4b4d-abc6-9a9ac4ab604d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.125 d1257537-0dd4-4575-b778-20b7cec2f945 default }" containerID=92594827aa9a5ec32787a2db868a766bce068b6c3806d22df0f2cde9699098e5 datapathConfiguration="&{false false false false false }" interface=lxcfdf4bede8448 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92594827aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92594827aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92594827aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=47727 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92594827aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=47727 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=92594827aa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=483 identity=47727 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=92594827aa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=483 identity=47727 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kfkfc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 0b81fc75-f1bb-44b9-8df9-0293aaba6b1c default }" containerID=e5d2dacc0e692accdac0541e2f8e414704f06e58107007b040253a1d370d7de5 datapathConfiguration="&{false false false false false }" interface=lxc21673d49af54 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5d2dacc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5d2dacc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5d2dacc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=43212 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5d2dacc0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=43212 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5d2dacc0e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=777 identity=43212 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5d2dacc0e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=777 identity=43212 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-b4v29 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 2205611e-a737-424f-842f-7a9260b95be5 default }" containerID=42809ed1f10c86eb416fad78ebb2b75797b8b24179fe5ff24d3e57d57d6d4063 datapathConfiguration="&{false false false false false }" interface=lxc2044840ed952 k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42809ed1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42809ed1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42809ed1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42809ed1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=13672 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42809ed1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=13672 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42809ed1f1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1101 identity=13672 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj subsys=endpoint level=info msg="Successful endpoint creation" containerID=42809ed1f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1101 identity=13672 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-xsplj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 658a44b8-d85d-4cc6-9f8c-5f1ad0db00ef default }" containerID=3f84c8723cd3af01c84239274a8967544a5c9d8cdcb3d0d24097a6f7bd118011 datapathConfiguration="&{false false false false false }" interface=lxc123559cd026e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f84c8723c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f84c8723c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f84c8723c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=8393 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f84c8723c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=8393 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 6d89cad1-a8ba-47c2-8678-1e0cc0244ab6 default }" containerID=2ce536b906186f8ed45c4184c31d9557cdabde4c77441518554cc8054d9e521b datapathConfiguration="&{false false false false false }" interface=lxc2b841a146c6b k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ce536b906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ce536b906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ce536b906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ce536b906 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=54610 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f84c8723c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=191 identity=8393 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f84c8723c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=191 identity=8393 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2ce536b906 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1235 identity=54610 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ce536b906 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1235 identity=54610 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ce536b906 endpointID=1235 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ce536b906 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1235 identity=54610 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-86d2be60-4cbf-483a-8828-7484dd7f7d3f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 6b2e0e41-ff89-4499-b095-05670ccce5f6 default }" containerID=cf0053dc29f5891ca754b410d4ad3e603bd8f449553707f09083d2fa378bb10e datapathConfiguration="&{false false false false false }" interface=lxcd545eeded551 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf0053dc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf0053dc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf0053dc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=11820 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf0053dc29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=11820 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cf0053dc29 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3259 identity=11820 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf0053dc29 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3259 identity=11820 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=52ac8d89-b057-4f6e-b6e9-19541e831837] Description:}]" policyAddRequest=4f0ad6cd-9bdb-4e59-b4c9-4102b3b5da4f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4f0ad6cd-9bdb-4e59-b4c9-4102b3b5da4f policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.183 c2743898-d0ba-408d-8999-8d7478adec69 default }" containerID=952a80964cbd250ff5ed2ca004d26aa43665522f4630a594d343f49bf282046c datapathConfiguration="&{false false false false false }" interface=lxc0b89eb8d679c k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=952a80964c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=952a80964c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=952a80964c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=952a80964c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=54610 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=952a80964c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=363 identity=54610 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=952a80964c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=363 identity=54610 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=daemon level=info msg="Delete endpoint request" containerID=952a80964c endpointID=363 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=952a80964c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=363 identity=54610 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9cee4016-d3de-4bca-91ad-4f3f5b707cb4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 2b4f8fff-f761-4c61-bff9-95335731f0d0 default }" containerID=cd0e2afe6eb798c0c832e73743b0d6ab4847fbb651da5697ef2c15c56a559d89 datapathConfiguration="&{false false false false false }" interface=lxca33a81668e57 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd0e2afe6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd0e2afe6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cd0e2afe6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd0e2afe6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=12668 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd0e2afe6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=12668 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd0e2afe6e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=328 identity=12668 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd0e2afe6e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=328 identity=12668 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=dfcc51ce-c66c-4dab-b7fe-8bb8d4e1c5ac] Description:}]" policyAddRequest=f4f96af2-9b13-43b6-9603-2ee632d2231b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f4f96af2-9b13-43b6-9603-2ee632d2231b policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.168 15180b4f-cf74-4876-81ad-b7824868655d default }" containerID=5390be34e486b46310fb93e8cada521ad2a91b5ba43d5ac9ad64f1eb36dc4da7 datapathConfiguration="&{false false false false false }" interface=lxc08f3f19daff0 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5390be34e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5390be34e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5390be34e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=5206 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5390be34e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=5206 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5390be34e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1082 identity=5206 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5390be34e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=5206 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008325780837853559 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.73 6c429b4b-e459-46da-aa6f-2a45297413b8 default }" containerID=c4dede25a749c1e715c6f2c440dac2a3567db595716b7d4c722ff28141c651b2 datapathConfiguration="&{false false false false false }" interface=lxc2ef8d9eb4890 k8sPodName=monitoring/node-feature-discovery-worker-6t4pj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4dede25a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6t4pj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4dede25a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6t4pj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4dede25a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=34786 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6t4pj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4dede25a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=34786 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6t4pj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 c60c1bff-a930-4827-8f59-e58f1b9b9a91 default }" containerID=53e3c414ed3a30c2d6044f98ce94220df5933f2f5c9c051ee629f4b56638939f datapathConfiguration="&{false false false false false }" interface=lxcf9c6a45c72c2 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53e3c414ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53e3c414ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.100 81cd6460-73c0-4c8b-bd64-f2e20832e92c default }" containerID=094a6235aded91152537bc9714d8a9b5657bd85031fc4cbb7662d4c19817ccad datapathConfiguration="&{false false false false false }" interface=lxcd93b94f35d08 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=094a6235ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=094a6235ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53e3c414ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=9241 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=53e3c414ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=9241 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=094a6235ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=33659 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=094a6235ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=835 identity=33659 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4dede25a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1761 identity=34786 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6t4pj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4dede25a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=34786 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6t4pj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53e3c414ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=9241 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53e3c414ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=9241 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gdj58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=094a6235ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=835 identity=33659 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=094a6235ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=835 identity=33659 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4pg9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 16b72ea4-b637-48cf-97ff-4e9f8b778c44 default }" containerID=ab12a54c716fa4ce71ef264cc1df55925a19ec4c19ad59f394451cde3af7335d datapathConfiguration="&{false false false false false }" interface=lxc8f7f03660208 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab12a54c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.167 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab12a54c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.167 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab12a54c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=16513 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.167 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab12a54c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=16513 ipv4=10.0.0.167 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab12a54c71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=16513 ipv4=10.0.0.167 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab12a54c71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=16513 ipv4=10.0.0.167 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sf456 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=481 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-186-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00481 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00481 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00481 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00481:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=481 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 f4adebf5-96cc-4b9d-a983-d139c614de8a default }" containerID=f7b66d7b5415669eb875e8e3dd8fc26bdb551cb3a3de9ef266be9e67b62dd7a8 datapathConfiguration="&{false false false false false }" interface=lxc58cadaa3bd83 k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7b66d7b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7b66d7b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=969c93c1-17b9-4056-af35-3c390a694d69,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=969c93c1-17b9-4056-af35-3c390a694d69,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=969c93c1-17b9-4056-af35-3c390a694d69;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=969c93c1-17b9-4056-af35-3c390a694d69;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f7b66d7b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7b66d7b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=15441 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=969c93c1-17b9-4056-af35-3c390a694d69,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=969c93c1-17b9-4056-af35-3c390a694d69,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7b66d7b54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=15441 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7b66d7b54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=15441 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7b66d7b54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=15441 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7b66d7b54 endpointID=8 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-5kxt5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=969c93c1-17b9-4056-af35-3c390a694d69 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=969c93c1-17b9-4056-af35-3c390a694d69 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f7b66d7b54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=15441 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5kxt5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 7c3f528b-7d0b-41c2-84f9-522ba8704832 default }" containerID=fd76f430ebf89fff14952b84e6247920081b2a544be9d5276e147223c1c28cee datapathConfiguration="&{false false false false false }" interface=lxc021b05096883 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd76f430eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd76f430eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd76f430eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=11464 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd76f430eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2846 identity=11464 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 67473d92-b37d-4b37-82de-f51b6a5a47dc default }" containerID=5b05907692b41899f2882cf474ed194dc6f95d2ca2dc5b93a8b02a55148748f4 datapathConfiguration="&{false false false false false }" interface=lxc9a26d0791aab k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b05907692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b05907692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b05907692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=18230 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b05907692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=18230 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd76f430eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2846 identity=11464 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd76f430eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2846 identity=11464 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ml9nk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.241 c52a6b37-0553-43d0-98e4-fc48453d8c3d default }" containerID=e7b17139c1c354af0c8a6413c4afa96dfed9bb256a5591426a0506da37330dea datapathConfiguration="&{false false false false false }" interface=lxc61c22b474488 k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7b17139c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7b17139c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7b17139c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=13836 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7b17139c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=13836 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b05907692 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=84 identity=18230 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b05907692 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=84 identity=18230 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h8bvf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e7b17139c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2551 identity=13836 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7b17139c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2551 identity=13836 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79f6d8bb6c-wgp2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 f1a34f8e-b217-42af-bc7c-577e698d9391 default }" containerID=6447eee1a6d930d6b959d42847be3a3741ab997ac1d7b21c09c54b294777365c datapathConfiguration="&{false false false false false }" interface=lxc9d8efbadfe11 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6447eee1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6447eee1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6447eee1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=44571 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6447eee1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=44571 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6447eee1a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2506 identity=44571 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6447eee1a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2506 identity=44571 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 5b280766-431c-46d4-a597-3b0d164a8889 default }" containerID=897cdf1020e1267585fc9f7a230afb6f6c769a89c6cfb9d7a7af68e58cb062ab datapathConfiguration="&{false false false false false }" interface=lxc791537f64f68 k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=897cdf1020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=897cdf1020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=897cdf1020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=897cdf1020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=54610 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=897cdf1020 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1802 identity=54610 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=endpoint level=info msg="Successful endpoint creation" containerID=897cdf1020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1802 identity=54610 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.74 ff9e3160-afde-4bb0-aae7-b6008b02ce51 default }" containerID=401ca639340e5d211c10692a25f338515fe200c1f0926c6b8e5a7539c7e6040e datapathConfiguration="&{false false false false false }" interface=lxc7223d5460f20 k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=401ca63934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=401ca63934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=401ca63934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=401ca63934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2745 identity=54610 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=401ca63934 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2745 identity=54610 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=401ca63934 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2745 identity=54610 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=daemon level=info msg="Delete endpoint request" containerID=6447eee1a6 endpointID=2506 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tnt4d subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1ee6794e-f987-460e-b8ca-3f8ba92d702f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6447eee1a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2506 identity=44571 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tnt4d subsys=endpoint level=info msg="Delete endpoint request" containerID=897cdf1020 endpointID=1802 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=401ca63934 endpointID=2745 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=897cdf1020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1802 identity=54610 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-add6c66a-df7e-444a-8735-d452ecf867fa subsys=endpoint level=info msg="Removed endpoint" containerID=401ca63934 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2745 identity=54610 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05745363-4885-401b-befb-eda5529b40bc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 4b12e30b-4720-46cf-af0c-293df88c4ccf default }" containerID=a7f1555a8e7da4f9f3ae8550da66f7fefd3878493f36011bb8b23514a1d4e4ee datapathConfiguration="&{false false false false false }" interface=lxc52ead8e5ddec k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7f1555a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7f1555a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7f1555a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7f1555a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=917 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7f1555a8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=917 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 0a0ee40c-f243-46a5-9abe-aa86c7f008e1 default }" containerID=f4dede00e794f266d05dfe516148f07e2700debce02326c3b4aa6111c0c32a05 datapathConfiguration="&{false false false false false }" interface=lxcc75e026a7415 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4dede00e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4dede00e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=a7f1555a8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2428 identity=917 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7f1555a8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=917 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4dede00e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=22960 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4dede00e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=22960 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4dede00e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1437 identity=22960 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4dede00e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1437 identity=22960 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 d835e67e-0389-4bde-8720-08f045288543 default }" containerID=781006216f84cc5b7652cf7d1a508bc065dbb5612bfb6a02a8d7c72a2995fc9e datapathConfiguration="&{false false false false false }" interface=lxc7e19a83e3146 k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=781006216f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=781006216f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=781006216f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=2541 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=781006216f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=2541 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 36efef18-bd21-4b57-8771-ea5da070c064 default }" containerID=5004100a94d3965977f83942aec6e0b674a2d4b06d2f84b054ee5c91ba77cbd6 datapathConfiguration="&{false false false false false }" interface=lxc1d5a805a663d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5004100a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5004100a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5004100a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identity=9659 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5004100a94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identity=9659 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 5676ef59-be06-48a7-a743-d369c7ab419e default }" containerID=65172f612afdc378592970a43a40c33891c6a1097a9c66a06d4ab6a099bdd849 datapathConfiguration="&{false false false false false }" interface=lxc623e1de5008d k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65172f612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65172f612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65172f612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=26427 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65172f612a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=26427 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=781006216f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1182 identity=2541 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=781006216f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1182 identity=2541 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-frn8l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65172f612a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1366 identity=26427 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65172f612a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1366 identity=26427 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5004100a94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2998 identity=9659 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5004100a94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2998 identity=9659 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 4694ce88-332b-49c8-ad90-4d21487f2f79 default }" containerID=a6f43e79de16f3eb9de069a1f1e7937014e1eb8332a96015f794c1c5bceb197c datapathConfiguration="&{false false false false false }" interface=lxc71c180a64697 k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6f43e79de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6f43e79de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6f43e79de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6f43e79de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=54610 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6f43e79de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=708 identity=54610 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6f43e79de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=54610 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 80978282-6ea1-453f-af73-cb2073dc4618 default }" containerID=52d5c5da56f0b270eb9eafb2decce424e1b1aef78cfad7d4ed1d704d93acec16 datapathConfiguration="&{false false false false false }" interface=lxcdb27f64252ec k8sPodName=monitoring/vector-xn9jn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52d5c5da56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-xn9jn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52d5c5da56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-xn9jn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52d5c5da56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identity=3343 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-xn9jn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=52d5c5da56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identity=3343 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-xn9jn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52d5c5da56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1127 identity=3343 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-xn9jn subsys=endpoint level=info msg="Successful endpoint creation" containerID=52d5c5da56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1127 identity=3343 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-xn9jn subsys=daemon level=info msg="Delete endpoint request" containerID=a6f43e79de endpointID=708 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6f43e79de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=54610 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bd6abb9-e7e7-4fa0-9e94-efb1ecbb9839 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 8bd07564-4c67-4c29-8eef-a3b23cdd3081 default }" containerID=84afa5db46ed02d8bf24ac4d579bc7f5828236396dd0bba04a660b20dd95be0e datapathConfiguration="&{false false false false false }" interface=lxceb22f700a95b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84afa5db46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84afa5db46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84afa5db46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identity=3161 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84afa5db46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identity=3161 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84afa5db46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1842 identity=3161 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84afa5db46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1842 identity=3161 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 e99bd4de-9e26-4248-80cd-6939ea78c606 default }" containerID=74f26538116ce6a50d0c5b506ced98e7d9b5f9ede5b291c5c1db94decf2c316e datapathConfiguration="&{false false false false false }" interface=lxca666a4b6b389 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74f2653811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74f2653811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74f2653811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identity=18683 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74f2653811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identity=18683 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74f2653811 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=259 identity=18683 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74f2653811 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=259 identity=18683 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jwz92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 51f52c51-91b0-456d-b261-a4fa71732c33 default }" containerID=81a34777899eb836de77fdd9b289a52872c3398b4fce33d306bf71b690bbca09 datapathConfiguration="&{false false false false false }" interface=lxc0dfead8e4085 k8sPodName=openstack/memcached-memcached-6479589586-r9fmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81a3477789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r9fmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81a3477789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r9fmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81a3477789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=39650 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r9fmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81a3477789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=39650 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r9fmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81a3477789 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=253 identity=39650 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r9fmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=81a3477789 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=253 identity=39650 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-r9fmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 447d85a7-8ea2-4dc8-816b-4a971c0f32f5 default }" containerID=10905e190e216422afc0b14da94b90b201e369be6f433b8553fa3f61c1162ca1 datapathConfiguration="&{false false false false false }" interface=lxcfcd951d0219a k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10905e190e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10905e190e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10905e190e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10905e190e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=54610 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10905e190e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=547 identity=54610 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=endpoint level=info msg="Successful endpoint creation" containerID=10905e190e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=54610 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=daemon level=info msg="Delete endpoint request" containerID=10905e190e endpointID=547 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=10905e190e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=54610 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ac27d923-bb65-47de-9e8c-2870f5b12e0b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 752c2889-50d3-4f44-8820-57da24e4e55d default }" containerID=77753fc2266fdc8c39673bb395b331c3e0c1267acd890ec1aa43f9a13760afd0 datapathConfiguration="&{false false false false false }" interface=lxcadcdb73412f5 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77753fc226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77753fc226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77753fc226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identity=39724 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77753fc226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2864 identity=39724 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77753fc226 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2864 identity=39724 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77753fc226 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2864 identity=39724 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 cbf1be2f-c21d-422b-904b-3e90f4eec3c6 default }" containerID=c0f3b9332fddec265022e95e17b42f4c4792ad8181cef66300be9cc9e777a723 datapathConfiguration="&{false false false false false }" interface=lxc8c1f36cd19f6 k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0f3b9332f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0f3b9332f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0f3b9332f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=37153 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0f3b9332f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=37153 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 d489245b-d9ae-409d-9e95-d41e9e742bfc default }" containerID=5dd7a25b85ecea7671e267c6b36943c35204d56f2a96a716a03bfbdf2b6329bc datapathConfiguration="&{false false false false false }" interface=lxcf9a11229af5f k8sPodName=openstack/keystone-credential-setup-wfcmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dd7a25b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dd7a25b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dd7a25b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identity=45141 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dd7a25b85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identity=45141 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0f3b9332f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1786 identity=37153 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0f3b9332f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=37153 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-api-5c5998fb59-4b8nt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5dd7a25b85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2438 identity=45141 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dd7a25b85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2438 identity=45141 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5dd7a25b85 endpointID=2438 k8sNamespace=openstack k8sPodName=keystone-credential-setup-wfcmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=cb84445b-558c-4b0f-9b70-6f4f2a9ae238 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5dd7a25b85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2438 identity=45141 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-wfcmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 070f1ffe-0df3-4474-b411-7e4675440a5d default }" containerID=0402dd20f79f54884633edc5b9cf72bdea4b7d9cab22eb8fab87430d911ded72 datapathConfiguration="&{false false false false false }" interface=lxcb88290b6ad84 k8sPodName=openstack/keystone-db-init-zfdlg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0402dd20f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0402dd20f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0402dd20f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=11855 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0402dd20f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1457 identity=11855 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0402dd20f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1457 identity=11855 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0402dd20f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=11855 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg subsys=daemon level=info msg="Delete endpoint request" containerID=0402dd20f7 endpointID=1457 k8sNamespace=openstack k8sPodName=keystone-db-init-zfdlg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=193ffb11-9174-4a33-81e8-820fed1628c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0402dd20f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1457 identity=11855 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-init-zfdlg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 70c2e320-434a-4599-8d41-c21074e4989c default }" containerID=1ceabf37a72619762e0b5d8d43f311270eaa5fddd001c351b6039859e8704c5f datapathConfiguration="&{false false false false false }" interface=lxcb96d6efafefa k8sPodName=openstack/keystone-fernet-setup-75jrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ceabf37a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ceabf37a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=af80eecc-1211-4931-9a59-e6f847da610a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=af80eecc-1211-4931-9a59-e6f847da610a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=af80eecc-1211-4931-9a59-e6f847da610a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=af80eecc-1211-4931-9a59-e6f847da610a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ceabf37a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=46365 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=af80eecc-1211-4931-9a59-e6f847da610a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=af80eecc-1211-4931-9a59-e6f847da610a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ceabf37a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=46365 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ceabf37a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4088 identity=46365 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ceabf37a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4088 identity=46365 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ceabf37a7 endpointID=4088 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-75jrz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=af80eecc-1211-4931-9a59-e6f847da610a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=af80eecc-1211-4931-9a59-e6f847da610a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1ceabf37a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4088 identity=46365 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-fernet-setup-75jrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 c05e7b16-5055-4a00-b91d-4ed482fe11cb default }" containerID=18a83503f107da72f79f14506b8a6726b4de1d0e9f8c0b16b8bbb355a496c3c4 datapathConfiguration="&{false false false false false }" interface=lxcc817226cb5ca k8sPodName=openstack/keystone-db-sync-fnnkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18a83503f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18a83503f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=97d18195-a980-441d-a962-438954b1b9b5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=97d18195-a980-441d-a962-438954b1b9b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18a83503f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=97d18195-a980-441d-a962-438954b1b9b5;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=97d18195-a980-441d-a962-438954b1b9b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18a83503f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=47496 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=97d18195-a980-441d-a962-438954b1b9b5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=97d18195-a980-441d-a962-438954b1b9b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18a83503f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=47496 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18a83503f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3530 identity=47496 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=18a83503f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3530 identity=47496 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18a83503f1 endpointID=3530 k8sNamespace=openstack k8sPodName=keystone-db-sync-fnnkw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=97d18195-a980-441d-a962-438954b1b9b5 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=97d18195-a980-441d-a962-438954b1b9b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=18a83503f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3530 identity=47496 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-db-sync-fnnkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 6e86f128-96a8-43eb-ad91-99ff08bfa8ab default }" containerID=c36d544487a556288dcaa7b0aecd23390b1cce92a44554ed5c41b713f9c3641e datapathConfiguration="&{false false false false false }" interface=lxc3070470070a1 k8sPodName=openstack/keystone-rabbit-init-nq4zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c36d544487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c36d544487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c36d544487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=1246 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36d544487 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=1246 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c36d544487 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3807 identity=1246 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36d544487 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3807 identity=1246 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c36d544487 endpointID=3807 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-nq4zm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a81cb6cc-f1e5-433e-acc3-1121a61563c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c36d544487 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3807 identity=1246 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-rabbit-init-nq4zm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 21617676-4c51-4f3b-8caa-f39f9deb7138 default }" containerID=39e5c5a341e62b83e0f29dbc66bbff8709a2f0567558c41d233b570b2255b09e datapathConfiguration="&{false false false false false }" interface=lxc2bfaefb74a8b k8sPodName=openstack/keystone-domain-manage-qsbv2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39e5c5a341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39e5c5a341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=39e5c5a341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=56733 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39e5c5a341 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=56733 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39e5c5a341 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=56733 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39e5c5a341 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=56733 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39e5c5a341 endpointID=967 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qsbv2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=eee9bb5e-6710-451a-a7cb-924ba8fddae3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=39e5c5a341 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=56733 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-qsbv2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 9185312d-1451-4441-9448-1247ad280ad7 default }" containerID=d627d33aa707688d7c0b4c0041bb60660277d77b59dd9c6f2008c9bd2b6f6c85 datapathConfiguration="&{false false false false false }" interface=lxc2c3d6246ba1c k8sPodName=openstack/keystone-bootstrap-gn4cx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d627d33aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d627d33aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=018c6978-32a2-4672-934c-c281eaae84cc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=018c6978-32a2-4672-934c-c281eaae84cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=018c6978-32a2-4672-934c-c281eaae84cc;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=018c6978-32a2-4672-934c-c281eaae84cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d627d33aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=29289 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=018c6978-32a2-4672-934c-c281eaae84cc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=018c6978-32a2-4672-934c-c281eaae84cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d627d33aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2410 identity=29289 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d627d33aa7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2410 identity=29289 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d627d33aa7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2410 identity=29289 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d627d33aa7 endpointID=2410 k8sNamespace=openstack k8sPodName=keystone-bootstrap-gn4cx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=018c6978-32a2-4672-934c-c281eaae84cc k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=018c6978-32a2-4672-934c-c281eaae84cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d627d33aa7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2410 identity=29289 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-bootstrap-gn4cx subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034118116520351155 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.210 b5135bcc-46c4-4976-8dc6-3aa60d74ea6e default }" containerID=c36c1c95c59c5316f1a598154127244b2854aece7215626af817a3126e43a824 datapathConfiguration="&{false false false false false }" interface=lxc4f381e8d6bfb k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c36c1c95c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c36c1c95c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c36c1c95c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36c1c95c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=54610 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c36c1c95c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3743 identity=54610 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36c1c95c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3743 identity=54610 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=daemon level=info msg="Delete endpoint request" containerID=c36c1c95c5 endpointID=3743 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c36c1c95c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3743 identity=54610 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e72c8b8c-2cfd-4565-88ef-e35453c641fa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 c9c3a022-7bd3-4da8-baea-67337e914266 default }" containerID=b01d4c4c0f10245f7dd4f4581e63f6f17f7dc487627a5bbbdc3fa435c23a8577 datapathConfiguration="&{false false false false false }" interface=lxc10bc238c43ea k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b01d4c4c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b01d4c4c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b01d4c4c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b01d4c4c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=12020 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b01d4c4c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=12020 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b01d4c4c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=36 identity=12020 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b01d4c4c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=36 identity=12020 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 c386e27d-75a9-4180-90bc-1d30cc020314 default }" containerID=34ea07c1df53e89a54f1d1c7dc27b228d5f13727a9ce1275b4317e7358cb2158 datapathConfiguration="&{false false false false false }" interface=lxcda70204b9be5 k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34ea07c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34ea07c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34ea07c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=696 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34ea07c1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=696 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 f7ee88a2-106c-4bcb-bd11-beab0d0df4d2 default }" containerID=c91b762707db93703cbfca6caff512b8aaab645d0a7f5f18f8e90c8026275834 datapathConfiguration="&{false false false false false }" interface=lxc79e825157750 k8sPodName=openstack/barbican-db-init-2jpmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c91b762707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c91b762707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c91b762707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=43234 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c91b762707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=43234 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34ea07c1df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=540 identity=696 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=34ea07c1df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=540 identity=696 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-api-5b966cd8f6-m9zwp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c91b762707 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2885 identity=43234 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c91b762707 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2885 identity=43234 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c91b762707 endpointID=2885 k8sNamespace=openstack k8sPodName=barbican-db-init-2jpmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=430fd503-2a97-45ba-a998-cfc681a5c6e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c91b762707 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2885 identity=43234 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-db-init-2jpmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 62e89fb4-936f-4411-b497-2e90ffdf33cb default }" containerID=932806341c8d0dab1fca9a35af3c75e2787e4c638ffa5178f68e304399851c93 datapathConfiguration="&{false false false false false }" interface=lxc727c00f150f9 k8sPodName=openstack/barbican-db-sync-ll8kj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=932806341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=932806341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=932806341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=30395 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=932806341c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=30395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=932806341c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=919 identity=30395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj subsys=endpoint level=info msg="Successful endpoint creation" containerID=932806341c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=30395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=932806341c endpointID=919 k8sNamespace=openstack k8sPodName=barbican-db-sync-ll8kj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=adc01be1-7ef2-4a55-859d-e1ff45f6b7b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=932806341c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=30395 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-db-sync-ll8kj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 ad63cbb9-888e-4bc5-bc53-0794ce3ca406 default }" containerID=487358c0ef8b242e263aeaea0b1eb6a6e82c19f6cc135cf529233cfe73a49c0f datapathConfiguration="&{false false false false false }" interface=lxc62d1183174ed k8sPodName=openstack/barbican-rabbit-init-5mt28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=487358c0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=487358c0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=487358c0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=487358c0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=4279 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=487358c0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=4279 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=487358c0ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=74 identity=4279 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=487358c0ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=4279 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=487358c0ef endpointID=74 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-5mt28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ad2610cf-6744-4030-93b7-3c34087c0c6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=487358c0ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=4279 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-rabbit-init-5mt28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 a18b0324-09e7-441e-b4db-2b736d974613 default }" containerID=be82e45345977ec21f098531468ec2c5e89eb3bcb0b5e47a68c00d5d0ae76403 datapathConfiguration="&{false false false false false }" interface=lxc9d98c3f99648 k8sPodName=openstack/barbican-ks-service-h2xsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be82e45345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be82e45345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be82e45345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=396 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be82e45345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=396 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=be82e45345 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2205 identity=396 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=be82e45345 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2205 identity=396 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be82e45345 endpointID=2205 k8sNamespace=openstack k8sPodName=barbican-ks-service-h2xsv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=adb19a7e-35be-40df-a4fe-2ff5af5f9a1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=be82e45345 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2205 identity=396 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-ks-service-h2xsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 b2b362b1-adf8-4ea6-bbc4-acf90daafc7f default }" containerID=b0ec240b6848f6e844733012ae44bb73d74383068ca733edd2f2d62a6f57123d datapathConfiguration="&{false false false false false }" interface=lxc20cc6e05ccaf k8sPodName=openstack/barbican-ks-endpoints-l8jj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0ec240b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0ec240b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0ec240b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identity=14570 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0ec240b68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identity=14570 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b0ec240b68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1131 identity=14570 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0ec240b68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1131 identity=14570 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0ec240b68 endpointID=1131 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-l8jj8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1ba2b62d-6e36-41ca-a03d-7dd90886ccd1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b0ec240b68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1131 identity=14570 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-endpoints-l8jj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 5c04e7fb-c149-41a3-aee1-1ad3604aba16 default }" containerID=4dc4330de58f2e9d0db1f17f6cc231c5e64995d03417336357d7eb18c36cd2a4 datapathConfiguration="&{false false false false false }" interface=lxc152564d054e6 k8sPodName=openstack/barbican-ks-user-2jlsx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dc4330de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dc4330de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dc4330de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=6483 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dc4330de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=6483 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4dc4330de5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2565 identity=6483 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dc4330de5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2565 identity=6483 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4dc4330de5 endpointID=2565 k8sNamespace=openstack k8sPodName=barbican-ks-user-2jlsx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=bb76cd22-9ab6-4b0e-ac62-289694d35091 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4dc4330de5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2565 identity=6483 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-ks-user-2jlsx subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.201 ceb845c4-ba0a-4b33-99e7-c663f619e17d default }" containerID=0ff3da4f608d3b7ea530004a16ac9da0de60a750d0c2813df7c5344e4f85a4f1 datapathConfiguration="&{false false false false false }" interface=lxca0e9c6a6d5f7 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ff3da4f60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 ipv4=10.0.0.201 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ff3da4f60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.201 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0ff3da4f60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 identity=36557 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.201 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ff3da4f60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4034 identity=36557 ipv4=10.0.0.201 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ff3da4f60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4034 identity=36557 ipv4=10.0.0.201 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ff3da4f60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4034 identity=36557 ipv4=10.0.0.201 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jgblv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 c12d83e0-dc98-428b-a3f6-5470d0b22a43 default }" containerID=d1694cb8236d294f21b185c99e9ce6678e68dff43461b353270e5f5870d54035 datapathConfiguration="&{false false false false false }" interface=lxc2802ae0bee7f k8sPodName=openstack/rook-ceph-detect-version-5zzx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1694cb823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1694cb823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1694cb823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=1719 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d1694cb823 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=1719 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1694cb823 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=467 identity=1719 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1694cb823 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=467 identity=1719 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 subsys=daemon level=info msg="Delete endpoint request" containerID=d1694cb823 endpointID=467 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-5zzx9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b5cc3c27-46ce-41f1-87aa-b100da036a46 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d1694cb823 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=467 identity=1719 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5zzx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 59770634-b85b-4315-b85a-c2e488d89b1d default }" containerID=6240722e8ff82fe70598a0e74a54ae43fa3d36cc6a8b4791075db555ad37ee4b datapathConfiguration="&{false false false false false }" interface=lxc8bd9192b056e k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6240722e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6240722e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6240722e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6240722e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=4061 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6240722e8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=4061 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6240722e8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=572 identity=4061 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6240722e8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=4061 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6240722e8f endpointID=572 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-zsrnf subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=6d789a94-9312-4db7-bd89-bd26d9242c46 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6240722e8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=4061 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zsrnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 b335b00c-6e78-40df-84e7-3e0b4a482af6 default }" containerID=68a53d818ee9f3a7a20806d7144f0c8aa3bb9c409003387484d59dd5ac81582a datapathConfiguration="&{false false false false false }" interface=lxc3d84ef399f22 k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68a53d818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68a53d818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68a53d818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68a53d818e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68a53d818e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=148 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=endpoint level=info msg="Successful endpoint creation" containerID=68a53d818e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=148 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=daemon level=info msg="Delete endpoint request" containerID=68a53d818e endpointID=148 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=68a53d818e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=148 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7e1eceb-bf38-4d81-b65e-933471d8058d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 be8198d8-769f-497f-b586-6c03d20b1ec8 default }" containerID=b980064d2bc64a42aa9427abbde9b662e3ed6e0d4c0cc663cc20448e3ce6670c datapathConfiguration="&{false false false false false }" interface=lxca4afc3899223 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b980064d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b980064d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b980064d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 identity=36491 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b980064d2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=595 identity=36491 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b980064d2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=595 identity=36491 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b980064d2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=595 identity=36491 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.156 7eb02736-3d81-489e-a404-55f5b1835cf6 default }" containerID=c108eccd41c9cb8abe1a20888add6c2671a29a020137c562c836abaf1a715a62 datapathConfiguration="&{false false false false false }" interface=lxc10d26bfbe381 k8sPodName=openstack/glance-db-init-scvfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c108eccd41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c108eccd41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c108eccd41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c108eccd41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=4771 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c108eccd41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=4771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c108eccd41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1341 identity=4771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c108eccd41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=4771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c108eccd41 endpointID=1341 k8sNamespace=openstack k8sPodName=glance-db-init-scvfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=28077b12-7e5b-44d3-84e1-697a68f8f07d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c108eccd41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=4771 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-scvfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 5f3eb7a1-f3e7-463b-8f11-b1f226a25491 default }" containerID=a7af36c50c5bdd16c9bab675d6ef115a3b71a3821a1ede952e94757dbbffa394 datapathConfiguration="&{false false false false false }" interface=lxc0f7663c1abfb k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7af36c50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7af36c50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7af36c50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=11978 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7af36c50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=11978 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 4794f006-8ed4-467b-abbb-0fda85bdd7e5 default }" containerID=7444384a6291fa949d38d064e12334f8a359071bb7e2d6398abddfdf600f541e datapathConfiguration="&{false false false false false }" interface=lxc62ecf3f8f38b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7444384a62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7444384a62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7444384a62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=21263 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7444384a62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=21263 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7af36c50c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=861 identity=11978 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7af36c50c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=11978 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-q957f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7444384a62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2109 identity=21263 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7444384a62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2109 identity=21263 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-mfwg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 c47d37a9-2d49-4e6a-8929-f8ecbab7a03e default }" containerID=104c6dc82f8da3879b4c476c4d4bb99af66e883d19324bad2bcdb66a57fc5d90 datapathConfiguration="&{false false false false false }" interface=lxcd9388a1adaac k8sPodName=openstack/glance-db-sync-47llq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=104c6dc82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=104c6dc82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=104c6dc82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=3311 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=104c6dc82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=3311 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=104c6dc82f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=3311 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq subsys=endpoint level=info msg="Successful endpoint creation" containerID=104c6dc82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=3311 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=104c6dc82f endpointID=1078 k8sNamespace=openstack k8sPodName=glance-db-sync-47llq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=1c10d9ee-ac17-4d51-9f87-2d5630ac949f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=104c6dc82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=3311 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-47llq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 68562e77-558d-4f9d-a5c7-dfe25969110b default }" containerID=0e241daa06f7f41e503e27d3c046eaa90581274f8153054058b84e7419d1e837 datapathConfiguration="&{false false false false false }" interface=lxcca83dd62652b k8sPodName=openstack/glance-rabbit-init-xdtjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e241daa06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e241daa06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e241daa06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=12327 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e241daa06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=12327 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e241daa06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1064 identity=12327 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e241daa06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1064 identity=12327 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx subsys=daemon level=info msg="Delete endpoint request" containerID=0e241daa06 endpointID=1064 k8sNamespace=openstack k8sPodName=glance-rabbit-init-xdtjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a1892990-7a29-428d-8471-5a6f51ea6d86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0e241daa06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1064 identity=12327 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-xdtjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 7a88eedd-af00-49d8-8592-87e6725425b7 default }" containerID=08cb538335e1af580752fc087e8bb35e28f22df067d834024cf1c9e63232bc55 datapathConfiguration="&{false false false false false }" interface=lxc827830bb3f62 k8sPodName=openstack/glance-ks-service-c6hbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08cb538335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08cb538335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08cb538335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=13867 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08cb538335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=13867 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08cb538335 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=306 identity=13867 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=08cb538335 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=13867 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08cb538335 endpointID=306 k8sNamespace=openstack k8sPodName=glance-ks-service-c6hbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=25ac75e4-e690-411f-95ed-dfafdc8bd162 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=08cb538335 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=13867 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-service-c6hbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 0422b95e-ea5f-4367-b257-d548ab161b88 default }" containerID=ba133747434b4538e4a5cb8c4e479eb853d539db78316722bdd6964e5a08406f datapathConfiguration="&{false false false false false }" interface=lxc1e9beec115c6 k8sPodName=openstack/glance-ks-endpoints-52bgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba13374743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba13374743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba13374743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba13374743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=11792 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba13374743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=11792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba13374743 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3280 identity=11792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba13374743 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=11792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba13374743 endpointID=3280 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-52bgj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=460d1364-36a3-4811-a8a6-45e8d945b745 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ba13374743 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=11792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-endpoints-52bgj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 a37250f0-81d0-41eb-bbf2-451cf791627f default }" containerID=d7bc9f92798de9ea3474c4562c8f30d324fec5d91b677c845dcd7ce5b68e6f33 datapathConfiguration="&{false false false false false }" interface=lxc65cf5d0383c9 k8sPodName=openstack/glance-ks-user-blqgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7bc9f9279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7bc9f9279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25e31989-7a20-44af-b280-08d5706dece7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=25e31989-7a20-44af-b280-08d5706dece7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=25e31989-7a20-44af-b280-08d5706dece7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=25e31989-7a20-44af-b280-08d5706dece7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7bc9f9279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=13203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25e31989-7a20-44af-b280-08d5706dece7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=25e31989-7a20-44af-b280-08d5706dece7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d7bc9f9279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=13203 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7bc9f9279 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1154 identity=13203 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7bc9f9279 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=13203 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd subsys=daemon level=info msg="Delete endpoint request" containerID=d7bc9f9279 endpointID=1154 k8sNamespace=openstack k8sPodName=glance-ks-user-blqgd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=25e31989-7a20-44af-b280-08d5706dece7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=25e31989-7a20-44af-b280-08d5706dece7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d7bc9f9279 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=13203 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-ks-user-blqgd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 45dbfbaf-dbb2-45f6-b754-ab457e95ac8b default }" containerID=709b6540160932e2077b22939bf9a508e583523b4cddafd7e0b253058ed23dfc datapathConfiguration="&{false false false false false }" interface=lxcab492bba9850 k8sPodName=openstack/glance-metadefs-load-j5d6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=709b654016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=709b654016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=709b654016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=25597 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=709b654016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=25597 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=709b654016 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3677 identity=25597 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=709b654016 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=25597 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=709b654016 endpointID=3677 k8sNamespace=openstack k8sPodName=glance-metadefs-load-j5d6k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=6a4e02d6-d8fa-45f8-8279-b0bbf25e30e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=709b654016 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=25597 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-j5d6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 b514d86b-d90c-4451-9a1d-49ed1322ef12 default }" containerID=86d9a9b49e5e7905a1175f76dd91d3bb78762d2c7ae6c0862163af49ad6cedd1 datapathConfiguration="&{false false false false false }" interface=lxc9a60d0ad2891 k8sPodName=openstack/glance-storage-init-spjlr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86d9a9b49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86d9a9b49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86d9a9b49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=14948 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86d9a9b49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=14948 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86d9a9b49e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=14948 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr subsys=endpoint level=info msg="Successful endpoint creation" containerID=86d9a9b49e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=14948 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86d9a9b49e endpointID=776 k8sNamespace=openstack k8sPodName=glance-storage-init-spjlr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=9951d453-d25e-4c12-b9b0-0f5281d17dea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=86d9a9b49e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=14948 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-spjlr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 46d156af-bdc4-4e74-b683-7c114cf6d781 default }" containerID=fa8f48e8a6c26eacdf6d560dfccda03fe98b34e0c66b630b4a4725fa67bf863a datapathConfiguration="&{false false false false false }" interface=lxc2f46bd37a3ce k8sPodName=openstack/glance-api-6bbc659569-mpsmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa8f48e8a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-6bbc659569-mpsmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa8f48e8a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-6bbc659569-mpsmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa8f48e8a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 identity=64010 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-6bbc659569-mpsmx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fa8f48e8a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3982 identity=64010 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-6bbc659569-mpsmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa8f48e8a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3982 identity=64010 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-6bbc659569-mpsmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa8f48e8a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3982 identity=64010 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-api-6bbc659569-mpsmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.170 9836519d-f0dc-4025-a47d-12f0882d3b09 default }" containerID=43ec158f32d914f59528fe765bcc38a96bbc2f58d0c38352e9a4dc8567290c3c datapathConfiguration="&{false false false false false }" interface=lxc69f82a98c9c4 k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43ec158f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43ec158f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43ec158f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43ec158f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=12519 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43ec158f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=12519 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 fee1c824-8fab-4ff5-811f-650645573e9f default }" containerID=c137fbc13ec4cce5c403e9960d386c8ae9007348486d99eae2e57dc652199104 datapathConfiguration="&{false false false false false }" interface=lxcc75b8adb52e9 k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c137fbc13e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c137fbc13e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c137fbc13e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 identity=6664 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c137fbc13e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1540 identity=6664 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 5e99bd5c-676c-4059-be03-ab7499e54687 default }" containerID=42a3f285892b08aa8082cf4baabbd97b9ac7bc05682d24f844325285b387221c datapathConfiguration="&{false false false false false }" interface=lxc6e8029a8df54 k8sPodName=openstack/staffeln-db-init-bph5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42a3f28589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42a3f28589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42a3f28589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=7317 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42a3f28589 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=7317 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c137fbc13e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1540 identity=6664 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c137fbc13e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1540 identity=6664 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-conductor-866c4b8c64-f5tn9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43ec158f32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=969 identity=12519 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=43ec158f32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=969 identity=12519 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7d577f5f9f-fmp4p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=42a3f28589 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3237 identity=7317 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=42a3f28589 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3237 identity=7317 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42a3f28589 endpointID=3237 k8sNamespace=openstack k8sPodName=staffeln-db-init-bph5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=3e0cbf88-3eae-4cfe-b8e3-13c6ffac7c1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=42a3f28589 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3237 identity=7317 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/staffeln-db-init-bph5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 54a1f9ee-e07b-41e0-a29a-fe828abf4f13 default }" containerID=dd54db18f68a385df5841383c15b0b55538e74f26c2f206b0e3c46b78dec1c62 datapathConfiguration="&{false false false false false }" interface=lxc0a3270f15657 k8sPodName=openstack/staffeln-db-sync-sg7t2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd54db18f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd54db18f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd54db18f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=5245 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dd54db18f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=5245 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd54db18f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1192 identity=5245 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd54db18f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1192 identity=5245 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd54db18f6 endpointID=1192 k8sNamespace=openstack k8sPodName=staffeln-db-sync-sg7t2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=57c4e75c-376b-4fc6-af98-a432960d2f5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=dd54db18f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1192 identity=5245 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/staffeln-db-sync-sg7t2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 860e785f-f8cb-4796-867f-1159e31b581f default }" containerID=9b27af39547ccff32a3e4181d896034dc1d750092bf34a8f4730425cdf5f1603 datapathConfiguration="&{false false false false false }" interface=lxcab9c484ce0cc k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b27af3954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b27af3954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b27af3954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b27af3954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=54610 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b27af3954 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2373 identity=54610 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b27af3954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=54610 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=daemon level=info msg="Delete endpoint request" containerID=9b27af3954 endpointID=2373 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9b27af3954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2373 identity=54610 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f30d386e-ad08-4272-8286-0c4f8f758b42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 0fa40804-f35e-4274-ac95-a84c5ca09a96 default }" containerID=fdcc7c4c68087307ab29906f2b4ccdc19db418de36aa0551052386e5113c42e7 datapathConfiguration="&{false false false false false }" interface=lxccb8c10c3561e k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdcc7c4c68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdcc7c4c68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdcc7c4c68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 identity=31295 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fdcc7c4c68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2566 identity=31295 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdcc7c4c68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2566 identity=31295 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdcc7c4c68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2566 identity=31295 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.233 d18b6ffa-afcd-4a77-9469-6dd3916f4d0f default }" containerID=74c08d3f5a1cc013767f614cabebfa1dd5e76ae6e38231468cd63dfb0ba23748 datapathConfiguration="&{false false false false false }" interface=lxcfb8da7f167ed k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74c08d3f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74c08d3f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74c08d3f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identity=1744 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=74c08d3f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identity=1744 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 05007eea-c17e-4487-926e-e115fd036ee1 default }" containerID=ab5a824b287613df9b6518f29a912e1ffae087583f460bdc2f72643e695f20f4 datapathConfiguration="&{false false false false false }" interface=lxc604163af4b5f k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab5a824b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab5a824b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab5a824b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=744 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab5a824b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=744 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74c08d3f5a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3866 identity=1744 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74c08d3f5a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3866 identity=1744 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/cinder-scheduler-6b945fb8d6-q6vx7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 67406248-a7f0-413a-880d-32d4f0aca195 default }" containerID=0d3fe6d2b09f25b8fc437eee64a5980b84758d662fd6c6456328ed49e4be4bd6 datapathConfiguration="&{false false false false false }" interface=lxc7be0543ac0b3 k8sPodName=openstack/cinder-db-init-gpslz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d3fe6d2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d3fe6d2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d3fe6d2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=29704 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d3fe6d2b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=29704 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab5a824b28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=744 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab5a824b28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=744 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/cinder-api-5b68fd5874-l7vhh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d3fe6d2b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2200 identity=29704 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d3fe6d2b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=29704 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d3fe6d2b0 endpointID=2200 k8sNamespace=openstack k8sPodName=cinder-db-init-gpslz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=75146506-66d2-468e-8cd9-6335e9a3a0c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=0d3fe6d2b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=29704 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/cinder-db-init-gpslz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 c8759273-dae7-4ef8-be58-ba7f7c1ca499 default }" containerID=012629379d28510a7b8b1c2aa4986f37a16e6211c0059c05309e4ac307e0b31b datapathConfiguration="&{false false false false false }" interface=lxc286c69eea1f7 k8sPodName=openstack/cinder-db-sync-scbns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=012629379d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=012629379d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=012629379d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=012629379d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=3030 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=012629379d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=3030 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=012629379d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1722 identity=3030 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns subsys=endpoint level=info msg="Successful endpoint creation" containerID=012629379d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=3030 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=012629379d endpointID=1722 k8sNamespace=openstack k8sPodName=cinder-db-sync-scbns subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=ac1abbd5-c873-40e0-89f2-052f96e2b60c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=012629379d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=3030 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/cinder-db-sync-scbns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 c1d8f00d-fad6-4203-b4f6-03717af1c703 default }" containerID=dcb7cfe3f6ae71dcbf05298cd95a35f32100c5595765a09afae422941388bac9 datapathConfiguration="&{false false false false false }" interface=lxc635904bbc79d k8sPodName=openstack/cinder-rabbit-init-54lfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcb7cfe3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcb7cfe3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcb7cfe3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=47923 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dcb7cfe3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=47923 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcb7cfe3f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=237 identity=47923 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcb7cfe3f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=47923 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcb7cfe3f6 endpointID=237 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-54lfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4f94a413-53a4-4e68-8b4a-90d8c6958ed3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=dcb7cfe3f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=47923 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/cinder-rabbit-init-54lfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 ecbbc5c0-0024-40ae-a4c6-7c6c2277c781 default }" containerID=801f5b34b883320cb0edc20b9168e7185b31d9aeca41ee0e146d42ff94d56bb0 datapathConfiguration="&{false false false false false }" interface=lxc507c6adcaa0a k8sPodName=openstack/cinder-ks-service-pstzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=801f5b34b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=801f5b34b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=801f5b34b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=801f5b34b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=28472 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=801f5b34b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=28472 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=801f5b34b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=376 identity=28472 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=801f5b34b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=376 identity=28472 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=801f5b34b8 endpointID=376 k8sNamespace=openstack k8sPodName=cinder-ks-service-pstzd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=41efd132-c4a5-4adb-aa87-2e0161b0f449 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=801f5b34b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=376 identity=28472 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/cinder-ks-service-pstzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 f1a8a5ed-d834-48de-a646-af453c8fb442 default }" containerID=bfecb12b15d71c65162bcb77ac9623a69b3eb1a3ceb2cfc3353c0c67f4f86b62 datapathConfiguration="&{false false false false false }" interface=lxcbe0e8bf949f9 k8sPodName=openstack/cinder-ks-endpoints-mws9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfecb12b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfecb12b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=86310839-9e5b-454f-9097-13d04254c565,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=86310839-9e5b-454f-9097-13d04254c565,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=86310839-9e5b-454f-9097-13d04254c565;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=86310839-9e5b-454f-9097-13d04254c565;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfecb12b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=21451 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=86310839-9e5b-454f-9097-13d04254c565,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=86310839-9e5b-454f-9097-13d04254c565,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bfecb12b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=576 identity=21451 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfecb12b15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=576 identity=21451 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfecb12b15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=21451 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfecb12b15 endpointID=576 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-mws9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=86310839-9e5b-454f-9097-13d04254c565 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=86310839-9e5b-454f-9097-13d04254c565 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bfecb12b15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=576 identity=21451 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/cinder-ks-endpoints-mws9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 119cbd62-eba2-4987-9d28-8fec9d3a7e09 default }" containerID=c67fab65c4b431174435067ca883c765604881809b21f83ed24bccfaf37ec522 datapathConfiguration="&{false false false false false }" interface=lxc105e2e89ac09 k8sPodName=openstack/cinder-ks-user-27kn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c67fab65c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c67fab65c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c67fab65c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c67fab65c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identity=9502 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c67fab65c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3246 identity=9502 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c67fab65c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3246 identity=9502 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c67fab65c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3246 identity=9502 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c67fab65c4 endpointID=3246 k8sNamespace=openstack k8sPodName=cinder-ks-user-27kn7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=9140159a-c184-4c0a-bce4-4998cc609b9b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=c67fab65c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3246 identity=9502 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-ks-user-27kn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 53032753-119f-472d-806e-62ed295b9815 default }" containerID=b3931f08fdc447cf1c7c4d2bdc20f399f258606974b71ba8c80e7df2b884ea9b datapathConfiguration="&{false false false false false }" interface=lxc28aada7c757d k8sPodName=openstack/cinder-backup-storage-init-j7xq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3931f08fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3931f08fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b3931f08fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b3931f08fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=5213 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3931f08fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=5213 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3931f08fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3165 identity=5213 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3931f08fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3165 identity=5213 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3931f08fd endpointID=3165 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-j7xq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=e937b43e-ef41-41b3-8158-7083bb97cd73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b3931f08fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3165 identity=5213 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j7xq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 9542b673-ee78-442d-83ab-70ff1cf36cac default }" containerID=042de81472023b661091978eaba565ca97bcad9e2651be024ca7b7d53fd0818e datapathConfiguration="&{false false false false false }" interface=lxc5c5487ddce99 k8sPodName=openstack/cinder-create-internal-tenant-cn725 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=042de81472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=042de81472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=042de81472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identity=42918 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=042de81472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identity=42918 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=042de81472 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=299 identity=42918 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 subsys=endpoint level=info msg="Successful endpoint creation" containerID=042de81472 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=299 identity=42918 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 subsys=daemon level=info msg="Delete endpoint request" containerID=042de81472 endpointID=299 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-cn725 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=393954f1-7c10-4bac-b3da-874d1b00110e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=042de81472 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=299 identity=42918 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-cn725 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 801f49e5-d53e-4e80-b4d9-013fbbaa5ccc default }" containerID=e8623eacd9f82859d2019010404d2363b06551434eb64334ec600faa0b589651 datapathConfiguration="&{false false false false false }" interface=lxc614f487b6d89 k8sPodName=openstack/cinder-storage-init-t79p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8623eacd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8623eacd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=83550c06-375b-4d15-9d89-72c8a736e237,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=83550c06-375b-4d15-9d89-72c8a736e237,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=83550c06-375b-4d15-9d89-72c8a736e237;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=83550c06-375b-4d15-9d89-72c8a736e237;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8623eacd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=10414 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=83550c06-375b-4d15-9d89-72c8a736e237,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=83550c06-375b-4d15-9d89-72c8a736e237,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8623eacd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=10414 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8623eacd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=118 identity=10414 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8623eacd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=10414 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8623eacd9 endpointID=118 k8sNamespace=openstack k8sPodName=cinder-storage-init-t79p4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=83550c06-375b-4d15-9d89-72c8a736e237 k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=83550c06-375b-4d15-9d89-72c8a736e237 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=e8623eacd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=118 identity=10414 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/cinder-storage-init-t79p4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 e861db96-0244-45aa-b869-5f14804156f4 default }" containerID=66b58b8975ea662e85b0f16464238048ae56424b4d9187fa732faf5ed490e2dc datapathConfiguration="&{false false false false false }" interface=lxcf2e1f8301381 k8sPodName=openstack/cinder-bootstrap-n97s8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b58b8975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b58b8975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b58b8975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=44620 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b58b8975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=44620 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b58b8975 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=536 identity=44620 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b58b8975 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=44620 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 c40f2a22-1720-4cdd-a682-4b52907e35fc default }" containerID=5d712ef17a2504bd92d225e325316c0f706ae5c50f60e2f0a57f24d17172910d datapathConfiguration="&{false false false false false }" interface=lxc50f9b8da766f k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d712ef17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d712ef17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d712ef17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=2628 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d712ef17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=2628 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 60525a27-1fdc-43a1-b8a1-565b577477c2 default }" containerID=7051053c4f4ee3ac39c3a3f90498b754b4ca1bf5ad7824b2ed36363947b8b193 datapathConfiguration="&{false false false false false }" interface=lxc6f5ab4eb50f6 k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7051053c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7051053c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7051053c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=14895 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7051053c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=14895 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d712ef17a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=789 identity=2628 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d712ef17a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=2628 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/cinder-volume-55d54b9d95-hkvxs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7051053c4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1118 identity=14895 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7051053c4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1118 identity=14895 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/cinder-backup-6dd59894d8-9kms8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66b58b8975 endpointID=536 k8sNamespace=openstack k8sPodName=cinder-bootstrap-n97s8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=eb6fb4f5-ee95-4c5d-9020-c95c6bcbc57f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=66b58b8975 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=44620 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/cinder-bootstrap-n97s8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 006956c6-d7c4-409a-80af-b5f149abef6b default }" containerID=13a9f6c21dd083a73d5c1f7733fc8611970de9cc5216c35388bdd01c4851454d datapathConfiguration="&{false false false false false }" interface=lxcbbb3ac6ff973 k8sPodName=openstack/placement-api-f966f6759-9grnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13a9f6c21d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-api-f966f6759-9grnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13a9f6c21d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-api-f966f6759-9grnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13a9f6c21d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identity=61112 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-api-f966f6759-9grnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13a9f6c21d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identity=61112 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-api-f966f6759-9grnv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 3856d7c9-dc84-49aa-b464-8f58f2d59ba7 default }" containerID=89847590d3b3977fb13887ae898bbbae41346cae03e3f0634a0f833fd90fabbb datapathConfiguration="&{false false false false false }" interface=lxcbe780a3ae66e k8sPodName=openstack/placement-db-init-dvkxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89847590d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89847590d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89847590d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identity=38553 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89847590d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4022 identity=38553 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13a9f6c21d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2682 identity=61112 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-api-f966f6759-9grnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=13a9f6c21d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2682 identity=61112 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/placement-api-f966f6759-9grnv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=89847590d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4022 identity=38553 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=89847590d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4022 identity=38553 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89847590d3 endpointID=4022 k8sNamespace=openstack k8sPodName=placement-db-init-dvkxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=87b75dc8-11ae-4d13-8d7c-05d4e9220c33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=89847590d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4022 identity=38553 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/placement-db-init-dvkxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 4a0d8c49-6437-4f04-9fcd-065c371d7f0a default }" containerID=9067d82af66c07fb390cfb8e16464acc645a443b38b0533f33841b67a1676530 datapathConfiguration="&{false false false false false }" interface=lxcf964b6e457c0 k8sPodName=openstack/placement-db-sync-wqpdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9067d82af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9067d82af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9067d82af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=19731 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9067d82af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=19731 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9067d82af6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=616 identity=19731 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9067d82af6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=616 identity=19731 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg subsys=daemon level=info msg="Delete endpoint request" containerID=9067d82af6 endpointID=616 k8sNamespace=openstack k8sPodName=placement-db-sync-wqpdg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=d4115b28-87f9-4b05-8182-27abbe3fb0ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9067d82af6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=616 identity=19731 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/placement-db-sync-wqpdg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 7ab25686-22a5-41ee-b925-896d721c91c2 default }" containerID=8ec5a2c584c1a530fb2a2f7d694b124cc3010402046536ffde777e66250e169e datapathConfiguration="&{false false false false false }" interface=lxcd8e0f8e17efd k8sPodName=openstack/placement-ks-service-mn52d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ec5a2c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ec5a2c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8ec5a2c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=15136 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ec5a2c584 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=15136 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ec5a2c584 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3033 identity=15136 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ec5a2c584 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=15136 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ec5a2c584 endpointID=3033 k8sNamespace=openstack k8sPodName=placement-ks-service-mn52d subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=e71f1a19-6b49-4367-9965-600b51d18eb7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=8ec5a2c584 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=15136 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/placement-ks-service-mn52d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 59dfd925-2e46-4944-b04a-d9abc07d295b default }" containerID=dd05be8dc418da4924a6438da11aa2825461e3a8055587fa5e8c2065ddeaa4d6 datapathConfiguration="&{false false false false false }" interface=lxc2cfa2de37977 k8sPodName=openstack/placement-ks-user-q4v5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd05be8dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd05be8dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd05be8dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd05be8dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=29332 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd05be8dc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1335 identity=29332 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd05be8dc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1335 identity=29332 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd05be8dc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1335 identity=29332 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd05be8dc4 endpointID=1335 k8sNamespace=openstack k8sPodName=placement-ks-user-q4v5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=c375f89b-edfc-4a18-8690-e48c6c7e30d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=dd05be8dc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1335 identity=29332 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-ks-user-q4v5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 c38a6dae-f6df-444b-aad0-2c4c400478f0 default }" containerID=bc7501b5ac37fa0bceb0de7c2f2f49a6bc22fe40db9cdb3930c97aa6cc4750d6 datapathConfiguration="&{false false false false false }" interface=lxc469bc28a9c9f k8sPodName=openstack/placement-ks-endpoints-sjxnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc7501b5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc7501b5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1b3acd04-123c-4507-9578-e236ece5e227,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1b3acd04-123c-4507-9578-e236ece5e227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=1b3acd04-123c-4507-9578-e236ece5e227;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1b3acd04-123c-4507-9578-e236ece5e227;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc7501b5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=17107 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1b3acd04-123c-4507-9578-e236ece5e227,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1b3acd04-123c-4507-9578-e236ece5e227,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc7501b5ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=17107 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bc7501b5ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1341 identity=17107 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc7501b5ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=17107 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc7501b5ac endpointID=1341 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-sjxnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=1b3acd04-123c-4507-9578-e236ece5e227 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1b3acd04-123c-4507-9578-e236ece5e227 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=bc7501b5ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=17107 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/placement-ks-endpoints-sjxnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 47235c91-e9f0-49d3-be71-61cfabc984d2 default }" containerID=a944ac5f636fb80487058fc5f6eb3fcfb1b236bf4f90d12ec1e64fc8f3cc903c datapathConfiguration="&{false false false false false }" interface=lxc9f85834dbfc4 k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a944ac5f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a944ac5f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a944ac5f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a944ac5f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=43329 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a944ac5f63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=43329 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a944ac5f63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=410 identity=43329 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=a944ac5f63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=410 identity=43329 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-57m2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 574bc9a9-dc5e-4bcc-a943-f57cb767e2f6 default }" containerID=1a7abce8266ca18d0a709fa2298696f2bafd1eb2ddf8aa80743b1528a20f13d2 datapathConfiguration="&{false false false false false }" interface=lxc624fdcb4c64d k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a7abce826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a7abce826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a7abce826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a7abce826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identity=54610 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a7abce826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3644 identity=54610 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a7abce826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3644 identity=54610 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=daemon level=info msg="Delete endpoint request" containerID=1a7abce826 endpointID=3644 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1a7abce826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3644 identity=54610 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-965e7508-d5af-4618-a94c-0de39daf61b7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 717bd8d1-2c71-4ade-86ca-85993207a4e4 default }" containerID=19a4890631725139d7e675953846190a691b954c912a6529b2ba3d9873894c10 datapathConfiguration="&{false false false false false }" interface=lxc889c8e677a52 k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a4890631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a4890631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a4890631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 identity=15364 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=19a4890631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1500 identity=15364 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19a4890631 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1500 identity=15364 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a4890631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1500 identity=15364 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 c5b633e2-34d3-4b6f-9e5e-97c322b66226 default }" containerID=f174c4af007f1192532f41dc885ca7a0c22a0a1268f3177c11332a00cb978324 datapathConfiguration="&{false false false false false }" interface=lxcee16955d3c4e k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f174c4af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f174c4af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f174c4af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f174c4af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=10194 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f174c4af00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=10194 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 770dfa7a-7b1c-496a-a7e1-f119697e93d6 default }" containerID=91944ffcf8f2a6c84e1a53cd77efa64b1f17a3e79c1508005a157862e77d1fe7 datapathConfiguration="&{false false false false false }" interface=lxc00215e6531aa k8sPodName=openstack/nova-cell-setup-46qv2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91944ffcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91944ffcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91944ffcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=19314 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91944ffcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=19314 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 9fb4c4ad-18cb-40b5-a903-2a4626ef6958 default }" containerID=cde36bb3fec1665a2ec00030656fbab55a06038d33474f1774f9a32bec7c2c37 datapathConfiguration="&{false false false false false }" interface=lxc0ad27b8ec997 k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cde36bb3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cde36bb3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cde36bb3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=715 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cde36bb3fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=715 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 1ebd4dc0-2100-4059-a6ce-d49e99d82150 default }" containerID=b168d0e1967423e1ca4321c38d5668fc564e88556503c52cbabbaa458b765bf9 datapathConfiguration="&{false false false false false }" interface=lxc761d73229d00 k8sPodName=openstack/nova-bootstrap-vh2wk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b168d0e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b168d0e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b168d0e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=18679 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b168d0e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=18679 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 5bf7fd66-d37f-4549-83b8-c940a7c272d6 default }" containerID=820668bb2d0aba4e6bb139370d39271de33c68e1c61bfecc7dccb44e8dec3da5 datapathConfiguration="&{false false false false false }" interface=lxc7e0515b25fdc k8sPodName=openstack/nova-db-init-l9gwm labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.236 3bbf3f45-a787-4dc1-88fd-71103b1137ba default }" containerID=4a18219377a87e59197f83a67c65e100816acc6e470946457c2bba5974c6bc21 datapathConfiguration="&{false false false false false }" interface=lxce9816fa6059a k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=820668bb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm subsys=endpoint level=info msg="New endpoint" containerID=4a18219377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3482 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=820668bb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a18219377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3482 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=f174c4af00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=10194 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff subsys=endpoint level=info msg="Successful endpoint creation" containerID=f174c4af00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=10194 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-scheduler-5fdccf69f8-8cxff subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91944ffcf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=73 identity=19314 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91944ffcf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=73 identity=19314 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 af63d250-a18f-488c-b867-66e397f8618e default }" containerID=4e6d4ced489791ac36126e509b65159f8047bb1353f95f5db5130e112e19ee41 datapathConfiguration="&{false false false false false }" interface=lxc912c94abd1cc k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e6d4ced48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e6d4ced48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cde36bb3fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=417 identity=715 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cde36bb3fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=417 identity=715 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/nova-conductor-57d6d9b4bb-w4bpb subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=820668bb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=57190 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=820668bb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=57190 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b168d0e196 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=502 identity=18679 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b168d0e196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=502 identity=18679 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a18219377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3482 identity=63954 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a18219377 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3482 identity=63954 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=820668bb2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2919 identity=57190 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=820668bb2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2919 identity=57190 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a18219377 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3482 identity=63954 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a18219377 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3482 identity=63954 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/nova-api-metadata-77b897595c-jcggf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e6d4ced48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e6d4ced48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=32303 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e6d4ced48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=32303 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e6d4ced48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=32303 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e6d4ced48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=32303 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/nova-api-osapi-68f5ff5978-rxbqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=820668bb2d endpointID=2919 k8sNamespace=openstack k8sPodName=nova-db-init-l9gwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=0d69b960-c6cb-4ad5-b6cf-4ecf7383758f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=820668bb2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2919 identity=57190 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/nova-db-init-l9gwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 13b0645b-f2b2-455b-957a-99b85cc4c046 default }" containerID=56bced324a911d01486de52a1274821ef5947027bce43117e8f761c5be3579bc datapathConfiguration="&{false false false false false }" interface=lxcb4b319383632 k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56bced324a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56bced324a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=56bced324a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56bced324a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=23472 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56bced324a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=23472 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56bced324a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3540 identity=23472 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56bced324a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3540 identity=23472 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/nova-novncproxy-65b784d579-s7nd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 8901bcff-ff51-46bf-abbe-e2e09589c548 default }" containerID=2aea4d82bb7dd9c137715918c1f82ef1f6d5c3f766a77fa13d0423af8803882a datapathConfiguration="&{false false false false false }" interface=lxc6e7ab6d6ee42 k8sPodName=openstack/nova-db-sync-dc8lm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2aea4d82bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2aea4d82bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2aea4d82bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=2626 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2aea4d82bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=2626 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2aea4d82bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=519 identity=2626 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2aea4d82bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=2626 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2aea4d82bb endpointID=519 k8sNamespace=openstack k8sPodName=nova-db-sync-dc8lm subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=2cd80fdf-04e1-49fc-bb15-b25f75102651 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=2aea4d82bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=2626 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/nova-db-sync-dc8lm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 6763ef04-d70e-433f-bf64-648f7ceb754b default }" containerID=0960603db6abd3f9a305c776836a135945541137b77d293188d7a4e065334030 datapathConfiguration="&{false false false false false }" interface=lxc3c3d486f5708 k8sPodName=openstack/nova-rabbit-init-mbn72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0960603db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0960603db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0960603db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=54264 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0960603db6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=54264 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0960603db6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2867 identity=54264 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0960603db6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2867 identity=54264 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0960603db6 endpointID=2867 k8sNamespace=openstack k8sPodName=nova-rabbit-init-mbn72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cc2357d5-5457-43dd-a5c4-9076d06f8687 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=0960603db6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2867 identity=54264 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/nova-rabbit-init-mbn72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 1ae72aae-fe7f-4b07-bead-5ac016f39820 default }" containerID=38d44f0402f95e69367d2d37368dec31b0207af213ac736321203888d57ff78a datapathConfiguration="&{false false false false false }" interface=lxc26bb289bb608 k8sPodName=openstack/nova-ks-service-cfn6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38d44f0402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38d44f0402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=543ff564-d966-462f-8f28-fdaa08232d30,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=543ff564-d966-462f-8f28-fdaa08232d30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=543ff564-d966-462f-8f28-fdaa08232d30;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=543ff564-d966-462f-8f28-fdaa08232d30;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38d44f0402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=48019 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=543ff564-d966-462f-8f28-fdaa08232d30,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=543ff564-d966-462f-8f28-fdaa08232d30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38d44f0402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=48019 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38d44f0402 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1625 identity=48019 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=38d44f0402 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=48019 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38d44f0402 endpointID=1625 k8sNamespace=openstack k8sPodName=nova-ks-service-cfn6l subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=543ff564-d966-462f-8f28-fdaa08232d30 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=543ff564-d966-462f-8f28-fdaa08232d30 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=38d44f0402 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=48019 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/nova-ks-service-cfn6l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 5007667b-7e5f-40cb-8910-3cc90404aee8 default }" containerID=78cea4f19af58b15915ce569ce510b976711184c9d2f7947a4323e694a3d9727 datapathConfiguration="&{false false false false false }" interface=lxc2ceee2b8b0b1 k8sPodName=openstack/nova-ks-endpoints-jbzvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78cea4f19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78cea4f19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78cea4f19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=18653 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78cea4f19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3340 identity=18653 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=78cea4f19a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3340 identity=18653 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=78cea4f19a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3340 identity=18653 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78cea4f19a endpointID=3340 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-jbzvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=804e11b7-e320-4a1f-bfed-fef9a1748ab7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=78cea4f19a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3340 identity=18653 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/nova-ks-endpoints-jbzvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 711163fc-7be5-4167-b82a-d161296fc63c default }" containerID=543ed91a4ae9df872132a5ea35b3e2aa954ca9e2ce31d2c504e609077d833a64 datapathConfiguration="&{false false false false false }" interface=lxc21cd2f5a14c6 k8sPodName=openstack/nova-ks-user-q9fhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=543ed91a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2971 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=543ed91a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2971 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e8328a2a-49bf-4986-ade8-523936f53777,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=e8328a2a-49bf-4986-ade8-523936f53777,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e8328a2a-49bf-4986-ade8-523936f53777;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=e8328a2a-49bf-4986-ade8-523936f53777;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=543ed91a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2971 identity=14449 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e8328a2a-49bf-4986-ade8-523936f53777,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=e8328a2a-49bf-4986-ade8-523936f53777,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=543ed91a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2971 identity=14449 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=543ed91a4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2971 identity=14449 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=543ed91a4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2971 identity=14449 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=543ed91a4a endpointID=2971 k8sNamespace=openstack k8sPodName=nova-ks-user-q9fhp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e8328a2a-49bf-4986-ade8-523936f53777 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=e8328a2a-49bf-4986-ade8-523936f53777 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=543ed91a4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2971 identity=14449 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/nova-ks-user-q9fhp subsys=endpoint level=info msg="Delete endpoint request" containerID=b168d0e196 endpointID=502 k8sNamespace=openstack k8sPodName=nova-bootstrap-vh2wk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=6dd355b7-bf28-4076-88ab-61906544c9fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=b168d0e196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=502 identity=18679 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/nova-bootstrap-vh2wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 ca4b0651-9964-4cc0-a9fc-be23807b8ef6 default }" containerID=35470a944487ae2d5cd162e6e7fef392f3d394c075d31878f8fabe2e8fba55fa datapathConfiguration="&{false false false false false }" interface=lxc81432403047e k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35470a9444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35470a9444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35470a9444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35470a9444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 identity=54610 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35470a9444 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3455 identity=54610 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35470a9444 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3455 identity=54610 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=daemon level=info msg="Delete endpoint request" containerID=35470a9444 endpointID=3455 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=35470a9444 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3455 identity=54610 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bfc7de-3507-4bb4-8925-6fda97b1a305 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 3c71651d-e442-417b-849b-d49920d2e7bd default }" containerID=866c0c1ba626bc9409727ea3d942b4da97a116a643da7257135e92b207461dff datapathConfiguration="&{false false false false false }" interface=lxc5b526ba92cb1 k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=866c0c1ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=866c0c1ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=866c0c1ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=866c0c1ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=20955 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=866c0c1ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3950 identity=20955 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=866c0c1ba6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3950 identity=20955 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=866c0c1ba6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3950 identity=20955 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 be0b5d1a-4c63-4d42-9d31-070d0947de80 default }" containerID=3866a89d29b3ef8f6ad389bd310aae0d4eeb522231fe86682190b23d6f4c0387 datapathConfiguration="&{false false false false false }" interface=lxc2ffe8ba2be3e k8sPodName=openstack/neutron-db-init-bngwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3866a89d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3866a89d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3866a89d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3866a89d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identity=62063 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3866a89d29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identity=62063 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 a90f60b5-d7e0-4896-9608-84be96c64ba4 default }" containerID=2a888c210db289723e92d79e2967c301f38434d9cdc25e1d6168b4abd4186072 datapathConfiguration="&{false false false false false }" interface=lxc676414435353 k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a888c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a888c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.81 eb532174-66b8-4115-9cdd-8f2e35124d2e default }" containerID=81d34d9121b86f9fe78280ea927e7d368cbb9d439d367d1fb88e2365e5e3e116 datapathConfiguration="&{false false false false false }" interface=lxc89bcdd10e0f7 k8sPodName=openstack/neutron-server-687b986d7b-n9l4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81d34d9121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/neutron-server-687b986d7b-n9l4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81d34d9121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/neutron-server-687b986d7b-n9l4g subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=2a888c210d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identity=61405 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a888c210d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=953 identity=61405 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81d34d9121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=16697 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/neutron-server-687b986d7b-n9l4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81d34d9121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=16697 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/neutron-server-687b986d7b-n9l4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3866a89d29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3991 identity=62063 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3866a89d29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3991 identity=62063 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a888c210d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=953 identity=61405 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a888c210d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=953 identity=61405 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-rpc-server-6c5f57f87f-8zcbt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81d34d9121 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3535 identity=16697 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/neutron-server-687b986d7b-n9l4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=81d34d9121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3535 identity=16697 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/neutron-server-687b986d7b-n9l4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3866a89d29 endpointID=3991 k8sNamespace=openstack k8sPodName=neutron-db-init-bngwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=2bec8c6a-d3f4-4486-926b-47e4896798a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=3866a89d29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3991 identity=62063 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-db-init-bngwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 88af7620-0f9f-4ff3-b0a4-cb91cfa1d29a default }" containerID=cfd8febff559f184734e7950c557f8fc1ca6423a0f4f7ca4ca00a3da50843a9e datapathConfiguration="&{false false false false false }" interface=lxc07598c81d5c1 k8sPodName=openstack/neutron-db-sync-qm7zh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfd8febff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfd8febff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cfd8febff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfd8febff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=56428 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfd8febff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=56428 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfd8febff5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1986 identity=56428 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfd8febff5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1986 identity=56428 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfd8febff5 endpointID=1986 k8sNamespace=openstack k8sPodName=neutron-db-sync-qm7zh subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=d5165e2b-e28c-429a-ba34-f0b4fb3da371 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=cfd8febff5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1986 identity=56428 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/neutron-db-sync-qm7zh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 8a7b024b-2b1b-4ed9-b2f0-34395514b30b default }" containerID=1c89c09e84d9d95acce4b515e3cad3e4b4c60248bff892c6b72b8dfc5ee65cb2 datapathConfiguration="&{false false false false false }" interface=lxce86e05db3041 k8sPodName=openstack/neutron-rabbit-init-xb6v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c89c09e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c89c09e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=45cde541-8699-4d03-8879-672d29e180e8,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=45cde541-8699-4d03-8879-672d29e180e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c89c09e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=45cde541-8699-4d03-8879-672d29e180e8;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=45cde541-8699-4d03-8879-672d29e180e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c89c09e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identity=3816 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=45cde541-8699-4d03-8879-672d29e180e8,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=45cde541-8699-4d03-8879-672d29e180e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c89c09e84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identity=3816 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c89c09e84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3683 identity=3816 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c89c09e84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3683 identity=3816 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c89c09e84 endpointID=3683 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-xb6v8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=45cde541-8699-4d03-8879-672d29e180e8 k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=45cde541-8699-4d03-8879-672d29e180e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=1c89c09e84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3683 identity=3816 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-rabbit-init-xb6v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 208b5591-5c63-451d-813c-83c122785749 default }" containerID=5144fa66995e1c0135fc3b54c0776fe8f0f00583613aa097f812f8382412dab0 datapathConfiguration="&{false false false false false }" interface=lxc3199c5bb072c k8sPodName=openstack/neutron-ks-service-7jwbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5144fa6699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5144fa6699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5144fa6699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=54373 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5144fa6699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=54373 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5144fa6699 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=54373 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5144fa6699 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=54373 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5144fa6699 endpointID=194 k8sNamespace=openstack k8sPodName=neutron-ks-service-7jwbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=97240119-ccf4-42ce-ab0e-6e3b48b69953 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5144fa6699 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=54373 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/neutron-ks-service-7jwbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 adac5464-ae96-412a-9043-d9c0be3fd9ad default }" containerID=9afdaee2459b5b14ac15618d7c95abf5599961c0e159052df1ff05528fc167cd datapathConfiguration="&{false false false false false }" interface=lxc6eb4f50b78b0 k8sPodName=openstack/neutron-ks-endpoints-49hkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9afdaee245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9afdaee245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9afdaee245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=24623 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9afdaee245 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=24623 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9afdaee245 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2200 identity=24623 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9afdaee245 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=24623 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg subsys=daemon level=info msg="Delete endpoint request" containerID=9afdaee245 endpointID=2200 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-49hkg subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3c8cb046-056b-49e1-9545-7167740f8b7d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=9afdaee245 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=24623 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/neutron-ks-endpoints-49hkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 2227d600-fd32-4075-9c94-0614f58a8a1e default }" containerID=6cec30ea6403f894273d3a43ab43249ac2549ba018229038e5d65a0ff584beef datapathConfiguration="&{false false false false false }" interface=lxc2ae3bbaa5431 k8sPodName=openstack/neutron-ks-user-vvw5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cec30ea64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cec30ea64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6cec30ea64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cec30ea64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=18967 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cec30ea64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=18967 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cec30ea64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=711 identity=18967 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cec30ea64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=18967 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cec30ea64 endpointID=711 k8sNamespace=openstack k8sPodName=neutron-ks-user-vvw5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=072ce22e-d5c7-498a-bb6f-6d58d208966f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=6cec30ea64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=18967 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/neutron-ks-user-vvw5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 f0db41a5-a6e2-4cd0-a7ec-a613e14243ef default }" containerID=f78b6b0dc75c0914e514a4e24dc49e89c632eba54d65fc3614d29016d2cfb032 datapathConfiguration="&{false false false false false }" interface=lxc4a1e551eca1e k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f78b6b0dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f78b6b0dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f78b6b0dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f78b6b0dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f78b6b0dc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=407 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f78b6b0dc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=daemon level=info msg="Delete endpoint request" containerID=f78b6b0dc7 endpointID=407 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f78b6b0dc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=54610 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c2311f2-8dd6-4dcf-8395-052db8fab8a3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 d82756b6-c928-438a-8550-67749412c34d default }" containerID=ce3b8541b3d834519927aa07ea060a145663cbe9f8154b38517b70c346375c47 datapathConfiguration="&{false false false false false }" interface=lxcf8794b3cc805 k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce3b8541b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce3b8541b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce3b8541b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=48509 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce3b8541b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=48509 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce3b8541b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1717 identity=48509 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce3b8541b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1717 identity=48509 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 7d25002a-bcdc-43aa-a928-d9052723f66e default }" containerID=2539d72a7971dc72933be02228d07b21b8bab44dfc6e3e18db550250064d4686 datapathConfiguration="&{false false false false false }" interface=lxc553e60bf5399 k8sPodName=openstack/heat-api-5c85db4b77-w8jpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2539d72a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-api-5c85db4b77-w8jpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2539d72a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-api-5c85db4b77-w8jpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2539d72a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=1975 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-api-5c85db4b77-w8jpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2539d72a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=1975 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-api-5c85db4b77-w8jpg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 662cdfea-0d25-4c57-b6c6-32047a32da47 default }" containerID=86b783a89aa87b12c20a52400608b6d03de0aa3b5a35e332d9ffbdc615fc6372 datapathConfiguration="&{false false false false false }" interface=lxcf930bffbc60c k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86b783a89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86b783a89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86b783a89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=17544 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86b783a89a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=17544 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 0c7c0896-bdad-4db7-97b0-fd9ef85a5cfc default }" containerID=43cb54282f4ff258fc560ccb01f20f2c3bbb954335c7347dafc92e0187bb7199 datapathConfiguration="&{false false false false false }" interface=lxce23c75687f68 k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43cb54282f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43cb54282f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43cb54282f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=680 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43cb54282f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=680 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2539d72a79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1586 identity=1975 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-api-5c85db4b77-w8jpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2539d72a79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1586 identity=1975 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/heat-api-5c85db4b77-w8jpg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=86b783a89a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=441 identity=17544 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86b783a89a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=441 identity=17544 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/heat-engine-74d5cdc99b-fpcl8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43cb54282f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1108 identity=680 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43cb54282f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1108 identity=680 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/heat-cfn-56457c6599-sxxg4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 42083049-74fd-4cfb-8fd3-ffddc1635ed9 default }" containerID=7c839f972017afe9fb6ec4535d187470fcf66c23dfe0ca6ccee20c82fcaef0fa datapathConfiguration="&{false false false false false }" interface=lxc221be9a03f02 k8sPodName=openstack/heat-db-init-v4cqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c839f9720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c839f9720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c839f9720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=9635 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c839f9720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=9635 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c839f9720 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3232 identity=9635 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c839f9720 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=9635 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c839f9720 endpointID=3232 k8sNamespace=openstack k8sPodName=heat-db-init-v4cqq subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3 k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=ba8e6e5a-6d94-4533-979f-d47065d63dc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=7c839f9720 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=9635 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/heat-db-init-v4cqq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 baf8ead2-3efb-46a6-a799-c686b1f41088 default }" containerID=0e162e403a38fa44c95e7c3d4ab13853950da2b12836714a6aa51d1b06d35466 datapathConfiguration="&{false false false false false }" interface=lxc22cda5a2808a k8sPodName=openstack/heat-db-sync-sv4s4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e162e403a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e162e403a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e162e403a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identity=34536 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e162e403a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1171 identity=34536 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e162e403a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1171 identity=34536 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e162e403a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1171 identity=34536 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e162e403a endpointID=1171 k8sNamespace=openstack k8sPodName=heat-db-sync-sv4s4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2 k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=3b2ad2ef-80c5-4fb3-9ec3-50a1124d02d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=0e162e403a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1171 identity=34536 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/heat-db-sync-sv4s4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 a4421d4f-37a5-4233-abde-f5e26b69c7cd default }" containerID=69b42dc6ee2a9dbbb5b62b4479714e7841d7f18ed9c621640957c989d119f34a datapathConfiguration="&{false false false false false }" interface=lxc2f3e9504aef7 k8sPodName=openstack/heat-rabbit-init-rj7wl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69b42dc6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69b42dc6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69b42dc6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69b42dc6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=6093 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69b42dc6ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=6093 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69b42dc6ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1117 identity=6093 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl subsys=endpoint level=info msg="Successful endpoint creation" containerID=69b42dc6ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=6093 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69b42dc6ee endpointID=1117 k8sNamespace=openstack k8sPodName=heat-rabbit-init-rj7wl subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=fef06314-13cd-48de-bbbf-a68966184f2f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=69b42dc6ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=6093 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/heat-rabbit-init-rj7wl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 8d1bb593-3fd0-4c93-90ef-815515e9547d default }" containerID=ebe72bfcf84a93880044b2330dfb4b0709d67baa6fcb92802954a13384fc84f0 datapathConfiguration="&{false false false false false }" interface=lxcb1d91728439c k8sPodName=openstack/heat-ks-service-kss4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebe72bfcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebe72bfcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebe72bfcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=38684 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebe72bfcf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=38684 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebe72bfcf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1362 identity=38684 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebe72bfcf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1362 identity=38684 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebe72bfcf8 endpointID=1362 k8sNamespace=openstack k8sPodName=heat-ks-service-kss4d subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31 k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=6c9801fb-b886-4703-9ea7-e5185928bc31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=ebe72bfcf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1362 identity=38684 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/heat-ks-service-kss4d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 2e3f019d-7311-48b8-9fba-42882408b19d default }" containerID=114d6dc22801d9d489f597add8540a6209737474abbc9ca8a95efd15ecaeb1b7 datapathConfiguration="&{false false false false false }" interface=lxc8a3ccc9a15c8 k8sPodName=openstack/heat-ks-endpoints-v8vgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=114d6dc228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=114d6dc228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=bd050490-bd28-4123-ab22-88f474a42e34,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bd050490-bd28-4123-ab22-88f474a42e34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=bd050490-bd28-4123-ab22-88f474a42e34;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bd050490-bd28-4123-ab22-88f474a42e34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=114d6dc228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=10187 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=bd050490-bd28-4123-ab22-88f474a42e34,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bd050490-bd28-4123-ab22-88f474a42e34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=114d6dc228 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=10187 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=114d6dc228 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3832 identity=10187 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=114d6dc228 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3832 identity=10187 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=114d6dc228 endpointID=3832 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-v8vgz subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=bd050490-bd28-4123-ab22-88f474a42e34 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bd050490-bd28-4123-ab22-88f474a42e34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=114d6dc228 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3832 identity=10187 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/heat-ks-endpoints-v8vgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 96584a6b-2194-4ec5-bb32-67af80818ee1 default }" containerID=a8113a251b4121bf392e787f1f304d4918cd9f559c41c8b359bfe8c4d9909f56 datapathConfiguration="&{false false false false false }" interface=lxca86bf397e06e k8sPodName=openstack/heat-ks-user-96lw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8113a251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8113a251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8113a251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identity=6770 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8113a251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identity=6770 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8113a251b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2520 identity=6770 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8113a251b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2520 identity=6770 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a8113a251b endpointID=2520 k8sNamespace=openstack k8sPodName=heat-ks-user-96lw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929 k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=6331a6d1-a8b3-4c0d-8c64-d1cd9c2cc929 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a8113a251b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2520 identity=6770 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-ks-user-96lw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 4dd61614-83ac-4be4-88cf-3b1d74b91920 default }" containerID=1cde5907a77d97827f22c6c26f0869900611e1b0ef5c4fabfeff041c0b7f3d7d datapathConfiguration="&{false false false false false }" interface=lxc7aad046de114 k8sPodName=openstack/heat-bootstrap-wgdz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cde5907a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cde5907a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cde5907a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=7871 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cde5907a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=7871 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cde5907a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1597 identity=7871 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cde5907a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=7871 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91944ffcf8 endpointID=73 k8sNamespace=openstack k8sPodName=nova-cell-setup-46qv2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=6fcb94bb-59dc-428a-9b7b-2c6bd71f9d2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Delete endpoint request" containerID=1cde5907a7 endpointID=1597 k8sNamespace=openstack k8sPodName=heat-bootstrap-wgdz9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=69d2d58c-66ec-4c4a-943e-d47679eedc90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=91944ffcf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=73 identity=19314 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/nova-cell-setup-46qv2 subsys=endpoint level=info msg="Removed endpoint" containerID=1cde5907a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=7871 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/heat-bootstrap-wgdz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 c6ea4a93-f9ec-4947-867b-12138517016f default }" containerID=05f9c93c1aad0c890ec0fb8d139974fb55cf1d6ad90ed6dbf5619579d4c9d13d datapathConfiguration="&{false false false false false }" interface=lxcb77e00945c01 k8sPodName=openstack/heat-domain-ks-user-5jpz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05f9c93c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f9c93c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05f9c93c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identity=13636 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f9c93c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identity=13636 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=05f9c93c1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2902 identity=13636 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f9c93c1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2902 identity=13636 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 subsys=daemon level=info msg="Delete endpoint request" containerID=05f9c93c1a endpointID=2902 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-5jpz4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=65eb1eaf-00a2-4735-94a5-373a2ef957aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=05f9c93c1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2902 identity=13636 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/heat-domain-ks-user-5jpz4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 dd548179-4e65-4a47-9f6b-22d983c14f09 default }" containerID=0b5195248b332f3bc8b7f6412ba7928688238f16d49d435d892277ae671dc621 datapathConfiguration="&{false false false false false }" interface=lxc8df323d3a794 k8sPodName=openstack/heat-trusts-fqnbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b5195248b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b5195248b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b5195248b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b5195248b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 identity=55820 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b5195248b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 identity=55820 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b5195248b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3876 identity=55820 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b5195248b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3876 identity=55820 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b5195248b endpointID=3876 k8sNamespace=openstack k8sPodName=heat-trusts-fqnbl subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=d0311c5c-e103-409a-beee-4e79b82f80f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=0b5195248b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3876 identity=55820 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-trusts-fqnbl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 964d9f9f-bbb8-4ed4-86c8-ec7cf1c4ce5a default }" containerID=b9fe33e3f6bc3fa0466b20371b50bea03caad80722eba8fa10f8163a52e48de4 datapathConfiguration="&{false false false false false }" interface=lxc9d073ecf6252 k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9fe33e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9fe33e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766705,k8s:component=engine-cleaner,k8s:controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766705,k8s:release_group=heat" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766705;k8s:component=engine-cleaner;k8s:controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766705;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b9fe33e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=23443 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766705,k8s:component=engine-cleaner,k8s:controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766705,k8s:release_group=heat" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9fe33e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=23443 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9fe33e3f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=116 identity=23443 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9fe33e3f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=23443 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9fe33e3f6 endpointID=116 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766705-lbcpm subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766705 k8s:component=engine-cleaner k8s:controller-uid=17fd465c-09b2-496b-a5f6-0b8b5062c243 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766705 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=b9fe33e3f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=23443 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766705-lbcpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 92c8aea6-2a88-4faa-b26e-96607b6ff07a default }" containerID=ee3fb37490c1dccbc4f3ecf5f5424d8a8b2d2553fad269ab7b01125367d01f47 datapathConfiguration="&{false false false false false }" interface=lxc912c45fe8abe k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee3fb37490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee3fb37490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee3fb37490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee3fb37490 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=54610 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee3fb37490 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1945 identity=54610 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee3fb37490 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=54610 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=daemon level=info msg="Delete endpoint request" containerID=ee3fb37490 endpointID=1945 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ee3fb37490 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=54610 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-45d7e539-31f3-41c5-b7d6-a1e2d4cb969b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 ed61b66f-dfee-4684-abca-42191f7c3d44 default }" containerID=96b22aa330e4da171c143b3955029c4e0fcced9f2f4970a9e8fcb74f718fe3c3 datapathConfiguration="&{false false false false false }" interface=lxc1917084e8efb k8sPodName=openstack/rabbitmq-octavia-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96b22aa330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96b22aa330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96b22aa330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-octavia;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96b22aa330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=25931 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96b22aa330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=25931 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96b22aa330 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2698 identity=25931 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96b22aa330 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2698 identity=25931 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 3a9971d2-4dac-486c-8fe1-c5ce2ab10db3 default }" containerID=b3d0d98dd00ba105f8643f8a5859f7b24eeea979011d585fb4edd573f06e3a4a datapathConfiguration="&{false false false false false }" interface=lxcf065970ef51d k8sPodName=openstack/octavia-api-748f45cc9-pdphn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3d0d98dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3d0d98dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b3d0d98dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3d0d98dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=40236 identityLabels="k8s:application=octavia,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=octavia" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3d0d98dd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=40236 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 c41935cd-c035-4aca-ae81-645db0387e09 default }" containerID=b8c7c711bef2faa63cd1f7eb5a39064eded26577c0ca477633baaddfcf8572e9 datapathConfiguration="&{false false false false false }" interface=lxc1245d76f9f4f k8sPodName=openstack/octavia-db-init-2svj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c7c711be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c7c711be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2;k8s:batch.kubernetes.io/job-name=octavia-db-init;k8s:component=db-init;k8s:controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8c7c711be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=21512 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c7c711be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=21512 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3d0d98dd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3337 identity=40236 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3d0d98dd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3337 identity=40236 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/octavia-api-748f45cc9-pdphn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8c7c711be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=21512 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c7c711be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=21512 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8c7c711be endpointID=395 k8sNamespace=openstack k8sPodName=octavia-db-init-2svj8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2 k8s:batch.kubernetes.io/job-name=octavia-db-init k8s:component=db-init k8s:controller-uid=825b59d6-6a0c-4aaf-ba3d-5f1207c321d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=b8c7c711be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=21512 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/octavia-db-init-2svj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 26c0528b-840d-4ae5-af48-539075237091 default }" containerID=fde3d62d15e2a7471ee4f5c4bfa9ae228d640ee7bc705b2de539b7e5be190ad6 datapathConfiguration="&{false false false false false }" interface=lxcccb3aca68b57 k8sPodName=openstack/octavia-db-sync-dlmfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fde3d62d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fde3d62d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b;k8s:batch.kubernetes.io/job-name=octavia-db-sync;k8s:component=db-sync;k8s:controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-sync;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fde3d62d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=42391 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fde3d62d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=42391 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fde3d62d15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1795 identity=42391 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fde3d62d15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1795 identity=42391 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fde3d62d15 endpointID=1795 k8sNamespace=openstack k8sPodName=octavia-db-sync-dlmfz subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b k8s:batch.kubernetes.io/job-name=octavia-db-sync k8s:component=db-sync k8s:controller-uid=0cc22cc4-e3c0-4e5c-b4fe-45b7b76cd83b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-sync k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=fde3d62d15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1795 identity=42391 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/octavia-db-sync-dlmfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 fa454381-55ac-4da8-9d8e-b563678b5164 default }" containerID=9ba0884fbb7e940b0227cfa39ab3a103f10c554ee62bad596385e251c765e21b datapathConfiguration="&{false false false false false }" interface=lxc46818476d75b k8sPodName=openstack/octavia-rabbit-init-wczvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ba0884fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ba0884fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659;k8s:batch.kubernetes.io/job-name=octavia-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-rabbit-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ba0884fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=6385 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ba0884fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=6385 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ba0884fbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2631 identity=6385 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ba0884fbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2631 identity=6385 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ba0884fbb endpointID=2631 k8sNamespace=openstack k8sPodName=octavia-rabbit-init-wczvt subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659 k8s:batch.kubernetes.io/job-name=octavia-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f31c5552-7c43-4c9e-88b2-af3ddc090659 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-rabbit-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=9ba0884fbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2631 identity=6385 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/octavia-rabbit-init-wczvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 dffa95ff-862b-4573-a3fb-01e5ecb2f4c9 default }" containerID=25e73cc2194df8909cddb3e0c7efdace11e69b0a7ac77d333da3b48b1f5037e3 datapathConfiguration="&{false false false false false }" interface=lxc436ce7d826d3 k8sPodName=openstack/octavia-ks-service-5gg5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25e73cc219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25e73cc219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=25e73cc219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606;k8s:batch.kubernetes.io/job-name=octavia-ks-service;k8s:component=ks-service;k8s:controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-service;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25e73cc219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 identity=19212 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25e73cc219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 identity=19212 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25e73cc219 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3229 identity=19212 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=25e73cc219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3229 identity=19212 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25e73cc219 endpointID=3229 k8sNamespace=openstack k8sPodName=octavia-ks-service-5gg5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606 k8s:batch.kubernetes.io/job-name=octavia-ks-service k8s:component=ks-service k8s:controller-uid=c9fd6a40-c4b7-4f8a-84f2-912d541eb606 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-service k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=25e73cc219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3229 identity=19212 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/octavia-ks-service-5gg5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 9a6e038e-9ca6-40ca-8ea2-f60fcf09f0a7 default }" containerID=ef074e5b756836126de8b47108a6d42e2419a8a43c6c68009d480d4703254855 datapathConfiguration="&{false false false false false }" interface=lxca1547aecccb1 k8sPodName=openstack/octavia-ks-endpoints-vglxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef074e5b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef074e5b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6;k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-endpoints;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef074e5b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=13177 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef074e5b75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=13177 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef074e5b75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2592 identity=13177 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef074e5b75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2592 identity=13177 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef074e5b75 endpointID=2592 k8sNamespace=openstack k8sPodName=octavia-ks-endpoints-vglxc subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6 k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=867dc84a-cc40-435c-aa2a-0a2b8d688eb6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-endpoints k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=ef074e5b75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2592 identity=13177 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vglxc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 71c1f322-7134-44c2-933f-2f08b3ed3c4a default }" containerID=74c04d77687a26e3535f7453491d826a41486736727f20d438157db3d90b7bdb datapathConfiguration="&{false false false false false }" interface=lxcf39c9c118b90 k8sPodName=openstack/octavia-ks-user-jdxzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74c04d7768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74c04d7768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a;k8s:batch.kubernetes.io/job-name=octavia-ks-user;k8s:component=ks-user;k8s:controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-user;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74c04d7768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=11200 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74c04d7768 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=11200 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74c04d7768 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=196 identity=11200 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=74c04d7768 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=11200 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74c04d7768 endpointID=196 k8sNamespace=openstack k8sPodName=octavia-ks-user-jdxzd subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a k8s:batch.kubernetes.io/job-name=octavia-ks-user k8s:component=ks-user k8s:controller-uid=be36d2e4-1702-41f4-9027-77cc735ac80a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-user k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=74c04d7768 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=11200 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/octavia-ks-user-jdxzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 8c3f207b-4198-4085-8bf9-b08b9eed9454 default }" containerID=a0c06fc76ddd7f819cf745706159f4c61f26d87ff5d45eb93b9eb0cefb40a7a8 datapathConfiguration="&{false false false false false }" interface=lxc3897e86dae9e k8sPodName=openstack/octavia-bootstrap-h4s85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0c06fc76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0c06fc76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4;k8s:batch.kubernetes.io/job-name=octavia-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-bootstrap;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0c06fc76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=55433 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0c06fc76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=55433 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a0c06fc76d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=930 identity=55433 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0c06fc76d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=930 identity=55433 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0c06fc76d endpointID=930 k8sNamespace=openstack k8sPodName=octavia-bootstrap-h4s85 subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4 k8s:batch.kubernetes.io/job-name=octavia-bootstrap k8s:component=bootstrap k8s:controller-uid=e86b3d87-8590-49ee-b22c-17b0f0d4cfa4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-bootstrap k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=a0c06fc76d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=930 identity=55433 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/octavia-bootstrap-h4s85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 4eed6115-8a38-4f1c-bb41-64a038bac1a4 default }" containerID=af0c4492c6af3174b1b2c90808a98bd6976b91f7c0f95875b4867ae0f44672df datapathConfiguration="&{false false false false false }" interface=lxc7fc59860408a k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af0c4492c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af0c4492c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766710,k8s:component=engine-cleaner,k8s:controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766710,k8s:release_group=heat" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766710;k8s:component=engine-cleaner;k8s:controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766710;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af0c4492c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=18544 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766710,k8s:component=engine-cleaner,k8s:controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766710,k8s:release_group=heat" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=af0c4492c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=18544 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af0c4492c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=407 identity=18544 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=af0c4492c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=18544 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 aedcc91c-89aa-4d45-85bd-90cdaa25dcf0 default }" containerID=cc0a944e39910bc542760439ce9942d03d0e1cd7a085316e3289cf6304a7fe1a datapathConfiguration="&{false false false false false }" interface=lxc8c7222a6f0ec k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc0a944e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc0a944e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc0a944e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=54610 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc0a944e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=54610 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc0a944e39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=852 identity=54610 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc0a944e39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=54610 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=daemon level=info msg="Delete endpoint request" containerID=cc0a944e39 endpointID=852 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cc0a944e39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=54610 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42258166-c4b1-4c2f-8766-1666e8a1d680 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 07a7f804-56b5-4940-ba5a-8d5b98503a93 default }" containerID=8a51f9e6319ad7d071761e447aa813532e76c9265f65cd0c3bf1f1758c79ef32 datapathConfiguration="&{false false false false false }" interface=lxca08fef302b8c k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a51f9e631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a51f9e631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8a51f9e631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=42106 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a51f9e631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=42106 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a51f9e631 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=193 identity=42106 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a51f9e631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=193 identity=42106 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af0c4492c6 endpointID=407 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766710-cdhmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766710 k8s:component=engine-cleaner k8s:controller-uid=f6e8847b-9bc6-4bb4-8922-03e00019a46c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766710 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=af0c4492c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=18544 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766710-cdhmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 6cdd9ea2-a538-4dcc-84ca-7549f63c9b8f default }" containerID=a6e8af28fa91117ef24cd7d6afaa5b5e08fcdeda27a58830674354ead512afd6 datapathConfiguration="&{false false false false false }" interface=lxc98f18a715817 k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6e8af28fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6e8af28fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by:kustomize k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name:orc k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:orc-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a6e8af28fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager;k8s:io.kubernetes.pod.namespace=orc-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6e8af28fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 identity=10500 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6e8af28fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3788 identity=10500 ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6e8af28fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3788 identity=10500 ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6e8af28fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3788 identity=10500 ipv4=10.0.0.184 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-fn2m5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 8c12e44e-2711-4aa5-af7f-3f7711e80e03 default }" containerID=1e3f8c885545ed67e12b1a6d2f2e1e1a1bbefdb5ac459d8446b5ea707afd8132 datapathConfiguration="&{false false false false false }" interface=lxc7e778ec0cefd k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e3f8c8855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e3f8c8855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=cluster-api;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-manager;k8s:io.kubernetes.pod.namespace=capi-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e3f8c8855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=62504 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e3f8c8855 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=62504 ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e3f8c8855 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=337 identity=62504 ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e3f8c8855 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=337 identity=62504 ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 346af6e3-3f5a-4675-af58-16e219400ce0 default }" containerID=f494fd0dfb1f2665b010d9a9254676b8aa36cd1e556786bde15065cbd082050a datapathConfiguration="&{false false false false false }" interface=lxcece324bcb322 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f494fd0dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f494fd0dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-bootstrap-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f494fd0dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=5404 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f494fd0dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=5404 ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f494fd0dfb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1976 identity=5404 ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=endpoint level=info msg="Successful endpoint creation" containerID=f494fd0dfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=5404 ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: watch of *v1.Pod ended with: very short watch: github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Unexpected watch close - watch lasted less than a second and no items received" subsys=klog level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 6ac57b14-d115-4b02-9a48-2a9ce27ed1a0 default }" containerID=10ff9ccfb327d340b4796e2276b81e4e16267f31ad690e4d223c17576f3a9bde datapathConfiguration="&{false false false false false }" interface=lxc92a2de1eb670 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10ff9ccfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10ff9ccfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=warning msg="Key allocation attempt failed" attempt=0 error="unable to allocate ID 31020 for key [k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]: Post \"https://10.96.0.1:443/apis/cilium.io/v2/ciliumidentities\": dial tcp 10.96.0.1:443: connect: connection refused" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=warning msg="Key allocation attempt failed" attempt=1 error="unable to allocate ID 16204 for key [k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]: Post \"https://10.96.0.1:443/apis/cilium.io/v2/ciliumidentities\": dial tcp 10.96.0.1:443: connect: connection refused" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=warning msg="Key allocation attempt failed" attempt=2 error="unable to allocate ID 23531 for key [k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]: Post \"https://10.96.0.1:443/apis/cilium.io/v2/ciliumidentities\": dial tcp 10.96.0.1:443: connect: connection refused" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=dfcc51ce-c66c-4dab-b7fe-8bb8d4e1c5ac] Description:}]" policyAddRequest=d72300d9-9a19-4d64-bd3a-980d728ed8a8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d72300d9-9a19-4d64-bd3a-980d728ed8a8 policyRevision=7 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4fa13100-6db0-4311-9176-5e3050e637c9] Description:}]" policyAddRequest=32d7d00b-9cea-4f64-a82a-98b0edd9a63a subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=32d7d00b-9cea-4f64-a82a-98b0edd9a63a policyRevision=9 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3b65f7a3-3662-46c6-a348-9cc711c14b70] Description:}]" policyAddRequest=0310316b-a594-497f-b8aa-a30406c03b22 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0310316b-a594-497f-b8aa-a30406c03b22 policyRevision=11 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=52ac8d89-b057-4f6e-b6e9-19541e831837] Description:}]" policyAddRequest=144ab788-d9ac-455d-be7f-49fec5054865 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=144ab788-d9ac-455d-be7f-49fec5054865 policyRevision=13 subsys=daemon level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10ff9ccfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=20912 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10ff9ccfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=20912 ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10ff9ccfb3 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1316 identity=20912 ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=10ff9ccfb3 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1316 identity=20912 ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 57eb65c5-b1f5-48d4-84ec-6c5bad2b7e46 default }" containerID=ae0129dc8737d11096fcdb972c9d8c249b236d7ef9686a60fe618aebdfcab7dc datapathConfiguration="&{false false false false false }" interface=lxcb32f01c47131 k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae0129dc87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae0129dc87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn:restricted]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=infrastructure-openstack;k8s:control-plane=capo-controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capo-manager;k8s:io.kubernetes.pod.namespace=capo-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae0129dc87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=2928 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae0129dc87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=2928 ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 e5c77758-d1e6-4966-a86c-02af1ed0c5c6 default }" containerID=1ba5ff4900dc0863aae408b7caaa33c999f3af57ddda766de3fa96232271ec36 datapathConfiguration="&{false false false false false }" interface=lxce9c116cac702 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ba5ff4900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 ipv4=10.0.0.9 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ba5ff4900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.9 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1ba5ff4900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 identity=5404 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.9 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ba5ff4900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 identity=5404 ipv4=10.0.0.9 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae0129dc87 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1361 identity=2928 ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae0129dc87 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1361 identity=2928 ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ba5ff4900 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1307 identity=5404 ipv4=10.0.0.9 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ba5ff4900 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1307 identity=5404 ipv4=10.0.0.9 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-pdg6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f494fd0dfb endpointID=1976 k8sNamespace=capi-kubeadm-bootstrap-system k8sPodName=capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system]" subsys=allocator level=info msg="Removed endpoint" containerID=f494fd0dfb datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1976 identity=5404 ipv4=10.0.0.148 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-758ps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 eadec7d3-29e8-41bf-886f-c1a33d000381 default }" containerID=02ac01e65028d9b48b1fafa0ae74d8299845b6abd8b4d39426c4b7dd66f21756 datapathConfiguration="&{false false false false false }" interface=lxc71fb229d065a k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02ac01e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 ipv4=10.0.0.77 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02ac01e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.77 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l subsys=endpoint level=info msg="Identity of endpoint changed" containerID=02ac01e650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=20912 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.77 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02ac01e650 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1238 identity=20912 ipv4=10.0.0.77 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02ac01e650 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1238 identity=20912 ipv4=10.0.0.77 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=02ac01e650 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1238 identity=20912 ipv4=10.0.0.77 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-ccn6l subsys=daemon level=info msg="Delete endpoint request" containerID=10ff9ccfb3 endpointID=1316 k8sNamespace=capi-kubeadm-control-plane-system k8sPodName=capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Removed endpoint" containerID=10ff9ccfb3 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1316 identity=20912 ipv4=10.0.0.190 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-v9dmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 abda6f02-de1c-46d7-ab3a-8babeb988bea default }" containerID=1ac999acb80a13db7744999cee0be45da8f7b440030fee20da465d599d5c56a2 datapathConfiguration="&{false false false false false }" interface=lxc64f5303f03ba k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ac999acb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 ipv4=10.0.0.174 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ac999acb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.174 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1ac999acb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=62504 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.174 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ac999acb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=62504 ipv4=10.0.0.174 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ac999acb8 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=939 identity=62504 ipv4=10.0.0.174 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ac999acb8 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=939 identity=62504 ipv4=10.0.0.174 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-ljqdz subsys=daemon level=info msg="Delete endpoint request" containerID=1e3f8c8855 endpointID=337 k8sNamespace=capi-system k8sPodName=capi-controller-manager-69f9d56d75-k6wx7 subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=cluster-api k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-manager k8s:io.kubernetes.pod.namespace=capi-system]" subsys=allocator level=info msg="Removed endpoint" containerID=1e3f8c8855 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=337 identity=62504 ipv4=10.0.0.172 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k6wx7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 1e277838-e4ba-4892-9686-8be6e8a6faaf default }" containerID=8cea4a2dd25ae1ebd920ee67fe53d95863305028cfc7fd8fe2344c5e6233bd34 datapathConfiguration="&{false false false false false }" interface=lxcb5bcd7e48f20 k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cea4a2dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cea4a2dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8cea4a2dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=2928 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cea4a2dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=2928 ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cea4a2dd2 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1075 identity=2928 ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cea4a2dd2 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1075 identity=2928 ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps subsys=daemon level=info msg="Delete endpoint request" containerID=ae0129dc87 endpointID=1361 k8sNamespace=capo-system k8sPodName=capo-controller-manager-8c5df4f-tshxz subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=ae0129dc87 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1361 identity=2928 ipv4=10.0.0.248 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-tshxz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 ba877bda-1011-49b5-9720-08838cd9ef61 default }" containerID=a68b6af95f4ee16ab215e087e58312779e9bb564beddf71a47287f3db1146247 datapathConfiguration="&{false false false false false }" interface=lxcb62b6573dce3 k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a68b6af95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 ipv4=10.0.0.204 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a68b6af95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.204 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a68b6af95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=2928 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.204 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a68b6af95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=2928 ipv4=10.0.0.204 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a68b6af95f datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=666 identity=2928 ipv4=10.0.0.204 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a68b6af95f datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=666 identity=2928 ipv4=10.0.0.204 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-qnjtb subsys=daemon level=info msg="Delete endpoint request" containerID=8cea4a2dd2 endpointID=1075 k8sNamespace=capo-system k8sPodName=capo-controller-manager-6f649456cd-tfhps subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=8cea4a2dd2 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1075 identity=2928 ipv4=10.0.0.178 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-tfhps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 4e184a62-8f5b-43f3-ae8b-d7ad2eef6825 default }" containerID=fa2c9c931f0c21b7ffb32641ecfce933719b421e1fcaf19f0ac67cb370fbb6a3 datapathConfiguration="&{false false false false false }" interface=lxc3b19622dd219 k8sPodName=openstack/magnum-conductor-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa2c9c931f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa2c9c931f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.177 815d1f98-b5a1-4ef5-8269-97cdc571193b default }" containerID=30187cb175af10cf213af5b1e76ba958e1e5a14a0d10624877fa5da1c2c39822 datapathConfiguration="&{false false false false false }" interface=lxc3e0d4b16f0b5 k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30187cb175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30187cb175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:apps.kubernetes.io/pod-index=0;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=fa2c9c931f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=23820 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-conductor-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa2c9c931f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=23820 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=30187cb175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30187cb175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=23297 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30187cb175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=23297 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 6886b155-314a-42cc-b95d-3433efb848e1 default }" containerID=aa71f4e1421881bb01c24974958b3a8189df14bb94cfe497435571e88cee4d15 datapathConfiguration="&{false false false false false }" interface=lxcc004720ee39c k8sPodName=openstack/magnum-db-init-r5p7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa71f4e142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa71f4e142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122;k8s:batch.kubernetes.io/job-name=magnum-db-init;k8s:component=db-init;k8s:controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa71f4e142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=59776 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa71f4e142 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=96 identity=59776 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa2c9c931f datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1412 identity=23820 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa2c9c931f datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1412 identity=23820 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=30187cb175 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=658 identity=23297 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30187cb175 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=658 identity=23297 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/magnum-api-67cd954fbd-8gx29 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aa71f4e142 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=96 identity=59776 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa71f4e142 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=96 identity=59776 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa71f4e142 endpointID=96 k8sNamespace=openstack k8sPodName=magnum-db-init-r5p7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122 k8s:batch.kubernetes.io/job-name=magnum-db-init k8s:component=db-init k8s:controller-uid=67d9e2a6-bab6-4259-962e-0116c42c3122 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=aa71f4e142 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=96 identity=59776 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/magnum-db-init-r5p7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 e373e845-1827-47e6-8025-6a2278cddae5 default }" containerID=292feaa613e3bdff7614b37be217b28ee0aed17812952e65cec15044ac32a16e datapathConfiguration="&{false false false false false }" interface=lxce2ee2c8a9ea6 k8sPodName=openstack/magnum-db-sync-6zw5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=292feaa613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/magnum-db-sync-6zw5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=292feaa613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=39641e04-630d-457a-b4ee-e58ec1cc56d9,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=39641e04-630d-457a-b4ee-e58ec1cc56d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/magnum-db-sync-6zw5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=39641e04-630d-457a-b4ee-e58ec1cc56d9;k8s:batch.kubernetes.io/job-name=magnum-db-sync;k8s:component=db-sync;k8s:controller-uid=39641e04-630d-457a-b4ee-e58ec1cc56d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-sync;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=292feaa613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identity=50524 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=39641e04-630d-457a-b4ee-e58ec1cc56d9,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=39641e04-630d-457a-b4ee-e58ec1cc56d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/magnum-db-sync-6zw5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=292feaa613 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2600 identity=50524 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/magnum-db-sync-6zw5s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=292feaa613 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=2600 identity=50524 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/magnum-db-sync-6zw5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=292feaa613 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=2600 identity=50524 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/magnum-db-sync-6zw5s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 3bdc476c-4fba-452f-a2a0-371c861318b3 default }" containerID=c553db8f37f8db3a5b8f2c67b802147ca7cd12d97139a5adcbefe820cd1f07ff datapathConfiguration="&{false false false false false }" interface=lxccda9d23888ad k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c553db8f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c553db8f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766715,k8s:component=engine-cleaner,k8s:controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766715,k8s:release_group=heat" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c553db8f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766715;k8s:component=engine-cleaner;k8s:controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766715;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c553db8f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 identity=65461 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766715,k8s:component=engine-cleaner,k8s:controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766715,k8s:release_group=heat" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c553db8f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 identity=65461 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c553db8f37 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1445 identity=65461 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=c553db8f37 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1445 identity=65461 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c553db8f37 endpointID=1445 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766715-b9j6j subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766715 k8s:component=engine-cleaner k8s:controller-uid=94efe54f-9444-4629-9b83-4f57a4f175c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766715 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=c553db8f37 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1445 identity=65461 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766715-b9j6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 a952c909-0388-4e65-8424-adbaf7419837 default }" containerID=e1f433d57bd6dd942531ae78bc0c03f0dbfe5826d36d161ddc3f9505c790e13b datapathConfiguration="&{false false false false false }" interface=lxc8a49627613eb k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1f433d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1f433d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a2df5647-9386-4675-8580-8ac82453469e,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29766720,k8s:component=service-cleaner,k8s:controller-uid=a2df5647-9386-4675-8580-8ac82453469e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29766720,k8s:release_group=nova" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.153 0c55f765-eaca-47c9-981c-52811c8c3abb default }" containerID=3e34de71aea17468e980403e0bc655d286c75620c71658971970547c64d60a20 datapathConfiguration="&{false false false false false }" interface=lxc33934707e961 k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e34de71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e34de71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766720,k8s:component=engine-cleaner,k8s:controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766720,k8s:release_group=heat" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=a2df5647-9386-4675-8580-8ac82453469e;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29766720;k8s:component=service-cleaner;k8s:controller-uid=a2df5647-9386-4675-8580-8ac82453469e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29766720;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1f433d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=27934 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=a2df5647-9386-4675-8580-8ac82453469e,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29766720,k8s:component=service-cleaner,k8s:controller-uid=a2df5647-9386-4675-8580-8ac82453469e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29766720,k8s:release_group=nova" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1f433d57b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=27934 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=3e34de71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766720;k8s:component=engine-cleaner;k8s:controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29766720;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e34de71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=22663 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766720,k8s:component=engine-cleaner,k8s:controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29766720,k8s:release_group=heat" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e34de71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=22663 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 c41e765b-d705-47d8-a054-034e078c86d2 default }" containerID=1b374d04397a17792bca5cabbb69396e378dadf59900f68d2836adfe5e84c0e7 datapathConfiguration="&{false false false false false }" interface=lxcb5e38692f49f k8sPodName=openstack/nova-cell-setup-29766720-db9pn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b374d0439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b374d0439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29766720,k8s:component=cell-setup,k8s:controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29766720,k8s:release_group=nova" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29766720;k8s:component=cell-setup;k8s:controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29766720;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b374d0439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=48070 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29766720,k8s:component=cell-setup,k8s:controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29766720,k8s:release_group=nova" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b374d0439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=48070 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1f433d57b datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=386 identity=27934 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1f433d57b datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=386 identity=27934 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1b374d0439 datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=2245 identity=48070 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b374d0439 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=2245 identity=48070 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e34de71ae datapathPolicyRevision=0 desiredPolicyRevision=13 endpointID=1300 identity=22663 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e34de71ae datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1300 identity=22663 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e34de71ae endpointID=1300 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29766720-ldzqm subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29766720 k8s:component=engine-cleaner k8s:controller-uid=d2af933a-b0fa-46ef-9ea1-0b5209ba9109 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29766720 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=3e34de71ae datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=1300 identity=22663 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/heat-engine-cleaner-29766720-ldzqm subsys=endpoint level=info msg="Delete endpoint request" containerID=1b374d0439 endpointID=2245 k8sNamespace=openstack k8sPodName=nova-cell-setup-29766720-db9pn subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762 k8s:batch.kubernetes.io/job-name=nova-cell-setup-29766720 k8s:component=cell-setup k8s:controller-uid=f7e7e9cc-3cdf-410b-bd8b-e90dc84a4762 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29766720 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=1b374d0439 datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=2245 identity=48070 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/nova-cell-setup-29766720-db9pn subsys=endpoint level=info msg="Delete endpoint request" containerID=e1f433d57b endpointID=386 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29766720-4kjlx subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=a2df5647-9386-4675-8580-8ac82453469e k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29766720 k8s:component=service-cleaner k8s:controller-uid=a2df5647-9386-4675-8580-8ac82453469e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29766720 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=e1f433d57b datapathPolicyRevision=13 desiredPolicyRevision=13 endpointID=386 identity=27934 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/nova-service-cleaner-29766720-4kjlx subsys=endpoint