level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.205856ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="98.683µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.057502ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.001µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.920533ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.151µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.37µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="65.383µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="67.892µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="78.661µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="401.572µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.74µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.323298ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.863535ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.132µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.801µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="216.436µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.333µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="67.451µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.056615ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="77.081µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.411µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.22.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.710127ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.318014ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.642242ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.83µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="23.42µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.29µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="370.081µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.94µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="251.877µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="855.716µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.181545ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.36µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.162µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.22 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.22 ipAddr.ipv6="" k8sNodeIP=199.204.45.22 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.22" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.245" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.22" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.22} {CiliumInternalIP 10.0.0.245}] 10.0.0.0/24 [] [] 10.0.0.26 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46765" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.603015241s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.94µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="16.55µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="93.743µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="14.41µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.661626688s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=313.853001ms file-path=/var/run/cilium/state/templates/9eafbe575bb9e37c4a96cb03f507087f6d13acf793ae40574d823640ec8c0355/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=973 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 fdbf9a3f-8be6-4497-81fe-e36c83837401 default }" containerID=aba14a9c9787604afa48dcb765481cefd656c6eff87bc76503f97231e2111db5 datapathConfiguration="&{false false false false false }" interface=lxc29aebdf2863a k8sPodName=kube-system/coredns-7c96b6546b-xhfbc labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.12 2fe4a4ca-e2ac-4bd6-b193-267a6de4878d default }" containerID=7ff866046c0da38b92047193fc1b265cf1d5cdd9e7acd9c59c3fd73f94cc1c47 datapathConfiguration="&{false false false false false }" interface=lxc50ab4d7bbc11 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ff866046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b subsys=endpoint level=info msg="New endpoint" containerID=aba14a9c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aba14a9c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7ff866046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aba14a9c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=50792 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aba14a9c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=50792 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=7ff866046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ff866046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=16039 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ff866046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=16039 ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identityLabels="reserved:health" ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identity=4 identityLabels="reserved:health" ipv4=10.0.0.26 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.06773756s file-path=/var/run/cilium/state/templates/dac7f992571001d9db63ab46f496ce5befb0c6e5e3f496270c67470bff4e9156/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=7ff866046c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3601 identity=16039 ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ff866046c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3601 identity=16039 ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aba14a9c97 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3892 identity=50792 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=aba14a9c97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3892 identity=50792 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1489 identity=4 ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ff866046c endpointID=3601 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-bz84b subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f67349e5-eb1d-4794-9e1d-9019c837f413 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=7ff866046c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3601 identity=16039 ipv4=10.0.0.12 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bz84b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 6dc1f9e3-4d03-4bfd-92f8-758abf4ba440 default }" containerID=3f0f02aa0084bc99d7341b7acc194d8069f38b1193ec0890ba4f0c31062e9446 datapathConfiguration="&{false false false false false }" interface=lxcfefd857e67ad k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f0f02aa00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f0f02aa00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f0f02aa00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=17090 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3f0f02aa00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=17090 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f0f02aa00 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=584 identity=17090 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f0f02aa00 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=584 identity=17090 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r9bn6 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=973 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00973 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00973 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00973 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00973:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=973 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 f3074b19-ac0a-4ea7-822c-4015a548be90 default }" containerID=1cc9bb242797c01c3f861992dd2fc9a09e3a509726058cff5052e443f4b53901 datapathConfiguration="&{false false false false false }" interface=lxc45cc3e2e8c4d k8sPodName=kube-system/coredns-67659f764b-ljgpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cc9bb2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-ljgpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cc9bb2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-ljgpp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1cc9bb2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 identity=50792 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-ljgpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cc9bb2427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3747 identity=50792 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-ljgpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 09647613-7d45-41fa-bb7c-850f81ebc92d default }" containerID=3003e812a7b0d399dfc3518c184c672b629120eec1b02a065274bfe2460aa381 datapathConfiguration="&{false false false false false }" interface=lxc7d41b2c51818 k8sPodName=kube-system/coredns-67659f764b-c45c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3003e812a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2474 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-c45c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3003e812a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2474 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-c45c2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3003e812a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2474 identity=50792 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-c45c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3003e812a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2474 identity=50792 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-c45c2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cc9bb2427 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3747 identity=50792 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-ljgpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cc9bb2427 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3747 identity=50792 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-67659f764b-ljgpp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3003e812a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2474 identity=50792 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-c45c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3003e812a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2474 identity=50792 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-c45c2 subsys=daemon level=info msg="Delete endpoint request" containerID=aba14a9c97 endpointID=3892 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-xhfbc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=aba14a9c97 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3892 identity=50792 ipv4=10.0.0.79 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xhfbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 8e16653e-bd60-4b14-8b67-61e6dd56ca77 default }" containerID=cb340e0a8d886ca0dc642957f2c1404f69ebfaba357c9f46453e6cbd19747dad datapathConfiguration="&{false false false false false }" interface=lxcc0c3095ade9d k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb340e0a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb340e0a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb340e0a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=6716 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb340e0a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=6716 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cb340e0a8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1192 identity=6716 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb340e0a8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1192 identity=6716 ipv4=10.0.0.149 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-qcdjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 3ad5b598-cc06-4f7e-a873-e79739f2d159 default }" containerID=d2b1876603cbdc501b430429d04b725b0dd762f2a218dda31c2a4e14567763de datapathConfiguration="&{false false false false false }" interface=lxcf6efb273e2b6 k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2b1876603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2b1876603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2b1876603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=53930 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2b1876603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=53930 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 c9c5501e-1e61-43ef-adfd-cbc39e9946b7 default }" containerID=66b7ac7b93a80e96095a3725ddbdebf3f7bf188e40a4034f54da86005ffae3f0 datapathConfiguration="&{false false false false false }" interface=lxc032cc358cdab k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.228 168668ad-8433-4667-957c-c8d36020737f default }" containerID=6adeb39be404ec87f4ac8543f0a001260868880a42d54d486e9fe90b64bd1fc8 datapathConfiguration="&{false false false false false }" interface=lxc4dbff56f18a2 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b7ac7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p subsys=endpoint level=info msg="New endpoint" containerID=6adeb39be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b7ac7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6adeb39be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b7ac7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identity=25955 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b7ac7b93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2857 identity=25955 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6adeb39be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=40952 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6adeb39be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=40952 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b7ac7b93 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2857 identity=25955 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b7ac7b93 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2857 identity=25955 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-25j8p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2b1876603 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2506 identity=53930 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2b1876603 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2506 identity=53930 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-jdwzq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6adeb39be4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=509 identity=40952 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6adeb39be4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=509 identity=40952 ipv4=10.0.0.228 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-5wh8t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 4b28c103-f939-43cb-a771-3b18a2cfbbfa default }" containerID=a76764fc59762fe906cc088f7ca1ed26e3642bf7d7251704e70c03ffd3b1c87d datapathConfiguration="&{false false false false false }" interface=lxc9cb07d769b4f k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a76764fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a76764fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a76764fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=6573 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a76764fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=6573 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a76764fc59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=560 identity=6573 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a76764fc59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=560 identity=6573 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a76764fc59 endpointID=560 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-56fw9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=73ed3a59-66b1-4a92-a272-68ae55e01f9d k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=a76764fc59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=560 identity=6573 ipv4=10.0.0.90 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-56fw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 8199127b-d5e1-4191-8d7b-1a25e20e964f default }" containerID=3f4b44d9b0f5e15988f98dcd6596418fe32a2e9e2e608e697d53ed00c307e100 datapathConfiguration="&{false false false false false }" interface=lxc46aa08c032fc k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f4b44d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f4b44d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f4b44d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=3705 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f4b44d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=3705 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3f4b44d9b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=606 identity=3705 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f4b44d9b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=606 identity=3705 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f4b44d9b0 endpointID=606 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7nwdr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f13dbf9f-0dac-428a-83fe-10d67821f953 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=3f4b44d9b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=606 identity=3705 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7nwdr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 5c5f6918-9f0d-47f6-bb35-58d0658bfb09 default }" containerID=038c4fb64fd93584344d6e28bf25ceedec39b1194a2cb4e2048388419e8bd392 datapathConfiguration="&{false false false false false }" interface=lxcb6ed2b2f8595 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=038c4fb64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=038c4fb64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=038c4fb64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=24567 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=038c4fb64f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=24567 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=038c4fb64f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=94 identity=24567 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=038c4fb64f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=94 identity=24567 ipv4=10.0.0.63 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lmsgh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 3e437f10-c305-4809-8d0b-01075b2ee6cd default }" containerID=79af6f8305c5a9e046bc280c0e66ab07d63195412d7bf55c0d5f47d510d3ba92 datapathConfiguration="&{false false false false false }" interface=lxcca5af38bc11d k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79af6f8305 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79af6f8305 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6fee2916-3844-49dc-bac3-55cb13865814,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6fee2916-3844-49dc-bac3-55cb13865814,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6fee2916-3844-49dc-bac3-55cb13865814;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6fee2916-3844-49dc-bac3-55cb13865814;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79af6f8305 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=758 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6fee2916-3844-49dc-bac3-55cb13865814,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6fee2916-3844-49dc-bac3-55cb13865814,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79af6f8305 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=758 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79af6f8305 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1349 identity=758 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls subsys=endpoint level=info msg="Successful endpoint creation" containerID=79af6f8305 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1349 identity=758 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79af6f8305 endpointID=1349 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hxhls subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6fee2916-3844-49dc-bac3-55cb13865814 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6fee2916-3844-49dc-bac3-55cb13865814 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=79af6f8305 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1349 identity=758 ipv4=10.0.0.218 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hxhls subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=42ce9085-5652-43aa-9f5a-ae6b382d312a] Description:}]" policyAddRequest=d7438009-e5e0-44f8-8688-32715a37599b subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=d7438009-e5e0-44f8-8688-32715a37599b policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=60eb60d2-c254-4acf-a33e-f97604b4d9ad] Description:}]" policyAddRequest=9d5b799a-9296-4272-b03d-e3b075591953 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9d5b799a-9296-4272-b03d-e3b075591953 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.127 90c97bff-6cb6-4743-851f-b7bc0ddaee00 default }" containerID=3c73deb499a597262ed0b9c4fc2c96b6a2827c17ac8a0071a41969a06b526a1c datapathConfiguration="&{false false false false false }" interface=lxc4ca896235030 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c73deb499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c73deb499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c73deb499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c73deb499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 identity=9325 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c73deb499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 identity=9325 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c73deb499 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3865 identity=9325 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c73deb499 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3865 identity=9325 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-zkkv5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 2e4f3334-413e-4037-9470-f714b05e29b3 default }" containerID=ff7ca3c9a11132d66669ecad6ed5480d80383219f18fb4a9dd555608896900cb datapathConfiguration="&{false false false false false }" interface=lxcbe5828414eed k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff7ca3c9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff7ca3c9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff7ca3c9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=2139 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff7ca3c9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=2139 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff7ca3c9a1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1163 identity=2139 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff7ca3c9a1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1163 identity=2139 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ht6dr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 98925185-5d73-4b87-84c3-736055920cfb default }" containerID=28ada9fb3e8bf1b9e53712228b0e4f4624f556e810a3fba66ce005ba9ada9bfa datapathConfiguration="&{false false false false false }" interface=lxcd506a71be68e k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28ada9fb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28ada9fb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28ada9fb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=21184 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=28ada9fb3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=21184 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28ada9fb3e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=455 identity=21184 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=28ada9fb3e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=455 identity=21184 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nnxzq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 b1e8c404-d2ec-4ee3-bf29-05de41d277b2 default }" containerID=ae5e414a3b5cac607ed1ae7c9909dc870fc70435b4eee9285f735dcc921449c7 datapathConfiguration="&{false false false false false }" interface=lxca6c4a85cda6a k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae5e414a3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae5e414a3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae5e414a3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=48833 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae5e414a3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=48833 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae5e414a3b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1625 identity=48833 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae5e414a3b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1625 identity=48833 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 4a7c445a-b966-42fd-ab3a-c2de4e25a961 default }" containerID=df28594308099fb33da00cf74630c8112ad8c83a65a61accdf183a4731c580e9 datapathConfiguration="&{false false false false false }" interface=lxc9ea7194eab30 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df28594308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df28594308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df28594308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df28594308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=54742 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df28594308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=54742 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df28594308 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=59 identity=54742 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df28594308 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=59 identity=54742 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=04a25077-566e-406f-96d2-9be3f5574676] Description:}]" policyAddRequest=0ee10f7b-e4b4-4005-b1a1-d569d30c9869 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0ee10f7b-e4b4-4005-b1a1-d569d30c9869 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=603f41d4-8d4d-40fb-a745-2857407fdb69] Description:}]" policyAddRequest=1f48469a-9fd2-4215-878a-9d60a3bbe7d9 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=1f48469a-9fd2-4215-878a-9d60a3bbe7d9 policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 523e570b-939b-4246-8b9e-c368f2662f6c default }" containerID=d8aebb9c2a0d75682e04503af500ebbb20f5631e1e1d6eadbe3974660267ade4 datapathConfiguration="&{false false false false false }" interface=lxc4b96c5a3eb77 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8aebb9c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8aebb9c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d8aebb9c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8aebb9c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=23213 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8aebb9c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=23213 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8aebb9c2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1331 identity=23213 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8aebb9c2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=23213 ipv4=10.0.0.96 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 7a5dc258-7280-4c37-9721-16472976bb4a default }" containerID=5d11fc000d2cd8c817173f56909d37f6a88dcc6cc186d4637bcf6cfe11d0adcc datapathConfiguration="&{false false false false false }" interface=lxc6c7846f2359f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d11fc000d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d11fc000d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d11fc000d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=47984 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d11fc000d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=47984 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d11fc000d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1696 identity=47984 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d11fc000d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1696 identity=47984 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.006364386489374653 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03185236787641863 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.238 1f4c8950-2acf-482c-9405-c7ea47a00155 default }" containerID=a3b2bb8d1f85689611a85f81441db54702b922562b406e01abda01a12e0b3881 datapathConfiguration="&{false false false false false }" interface=lxc157bb15a85e3 k8sPodName=monitoring/node-feature-discovery-worker-h5f9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3b2bb8d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h5f9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3b2bb8d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h5f9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3b2bb8d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identity=39304 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h5f9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3b2bb8d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identity=39304 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h5f9v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 835bc0a2-e406-4040-bc5c-5264b986780b default }" containerID=54a521a75b04600f0c2746f977edbc624314ccde956a57664b95d86e2df68513 datapathConfiguration="&{false false false false false }" interface=lxcd2198126fa0a k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54a521a75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54a521a75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.79 ec6d4964-6ae2-4fc1-a3d1-712b62d58bdb default }" containerID=2fbed799f9cfd8c6f34babd5c3722a7245819683789b1270173e52c4c86da0a4 datapathConfiguration="&{false false false false false }" interface=lxc622c12014865 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fbed799f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fbed799f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=54a521a75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=4445 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54a521a75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=4445 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fbed799f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=27076 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fbed799f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=27076 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3b2bb8d1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2327 identity=39304 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h5f9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3b2bb8d1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2327 identity=39304 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h5f9v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2fbed799f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1139 identity=27076 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fbed799f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1139 identity=27076 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jlpls subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=54a521a75b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=839 identity=4445 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=54a521a75b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=839 identity=4445 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xkk8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 b1ea24cc-b397-45ec-8c17-bf7451b35d28 default }" containerID=4c4b978799b9141bfa4be84e1c6c47f545d9f0537efe6a80005d6d1c70ba5a7b datapathConfiguration="&{false false false false false }" interface=lxc0e3988cbf806 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c4b978799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.47 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c4b978799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.47 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c4b978799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=61257 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.47 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c4b978799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=61257 ipv4=10.0.0.47 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c4b978799 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=84 identity=61257 ipv4=10.0.0.47 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c4b978799 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=84 identity=61257 ipv4=10.0.0.47 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-c4f49 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=973 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-186-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/storage-nonrotationaldisk=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00973 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00973 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00973 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00973:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=973 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 7308b6ee-6411-415e-8bb9-5edf5e8ea3dd default }" containerID=bfccbc940495f42f722a3b413cac3aa175682a3af6989dc5542d41b6931c2327 datapathConfiguration="&{false false false false false }" interface=lxc18aa7fe9a26d k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfccbc9404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfccbc9404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfccbc9404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=22184 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfccbc9404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=22184 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bfccbc9404 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2210 identity=22184 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfccbc9404 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2210 identity=22184 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfccbc9404 endpointID=2210 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2g896 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=25e64cb5-d0c2-4cbc-b66f-5d57408c021c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=bfccbc9404 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2210 identity=22184 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2g896 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 acf5c3b4-8512-48cb-be6d-d1cf46d20003 default }" containerID=6e10904579a3025fe355d7904a263a3bbe2ae7e3f8572860a0195510d545d9da datapathConfiguration="&{false false false false false }" interface=lxc116d822021fe k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e10904579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e10904579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.229 64d8ee92-49db-4806-a157-399301997549 default }" containerID=ba1284a318eabcabc7237602313da81ca57b631a5dd8689d493fba33a05ccca2 datapathConfiguration="&{false false false false false }" interface=lxc75bc06332543 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba1284a318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba1284a318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=6e10904579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=8511 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e10904579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1545 identity=8511 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba1284a318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba1284a318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=48994 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba1284a318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=48994 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 4cc9fbb7-8e8d-4f43-9c25-e58eeea02fe0 default }" containerID=ecbe82d818ede9214b65f93855ba346f6ef052dbd682d96daf04fa90e6abeaff datapathConfiguration="&{false false false false false }" interface=lxcf8f1f812caec k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecbe82d818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecbe82d818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecbe82d818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=33037 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecbe82d818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=33037 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba1284a318 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=429 identity=48994 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba1284a318 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=429 identity=48994 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-w5g65 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e10904579 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1545 identity=8511 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e10904579 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1545 identity=8511 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tp8c5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ecbe82d818 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1766 identity=33037 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecbe82d818 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1766 identity=33037 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5f48b5849f-w78h2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 64f22c2d-1c79-49f4-9139-471f3314e0f7 default }" containerID=aa696d1520a0c46e90ef279f77abea14e31a2e144f1d75930cf371797e2a0683 datapathConfiguration="&{false false false false false }" interface=lxc49c9c4210b5f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa696d1520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa696d1520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9775ca42-abd7-439b-b652-07409f36e074,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9775ca42-abd7-439b-b652-07409f36e074,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9775ca42-abd7-439b-b652-07409f36e074;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9775ca42-abd7-439b-b652-07409f36e074;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa696d1520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=38437 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9775ca42-abd7-439b-b652-07409f36e074,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9775ca42-abd7-439b-b652-07409f36e074,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa696d1520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=38437 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa696d1520 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=30 identity=38437 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa696d1520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=38437 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa696d1520 endpointID=30 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xkjpf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9775ca42-abd7-439b-b652-07409f36e074 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9775ca42-abd7-439b-b652-07409f36e074 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=aa696d1520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=30 identity=38437 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xkjpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 f5533727-9718-49ac-8ae5-d10ba260e501 default }" containerID=8aa59f8a3c3ea52a4c77d24b93c14f77d6bc46d376dc044de7511f6221e3d638 datapathConfiguration="&{false false false false false }" interface=lxc4392124795ea k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aa59f8a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aa59f8a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aa59f8a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=18961 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aa59f8a3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=18961 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 673714a5-01b1-4434-9037-96e1f5d8570a default }" containerID=5514bd4cd71996eafafacf83599c904fa1964881fec1ba0f38f4e070d37bd343 datapathConfiguration="&{false false false false false }" interface=lxc762ecc632a01 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5514bd4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5514bd4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5514bd4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 identity=1652 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5514bd4cd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1585 identity=1652 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aa59f8a3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1501 identity=18961 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aa59f8a3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1501 identity=18961 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5514bd4cd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1585 identity=1652 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5514bd4cd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1585 identity=1652 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 c894cee5-73bb-4aef-86d3-24e080c21df1 default }" containerID=99b6da57387a479e037207d4fb2a7e872ed12b10104c77906761595a16296c1a datapathConfiguration="&{false false false false false }" interface=lxc7cf561e14443 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99b6da5738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2452 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99b6da5738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2452 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.160 afe4063c-b493-4be0-a2dd-d847bea0a674 default }" containerID=7ec9ecb684141bc88889f92ee3d9aa91e6562dea95b284158ce4b7c56b238f55 datapathConfiguration="&{false false false false false }" interface=lxcbf914e4c7c83 k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ec9ecb684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ec9ecb684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 71d1bdc1-f5d8-4267-92c6-10a47aadf481 default }" containerID=6fcc019a280adbc5efe2f58adbe3150972047dbb40295baa79fd5d7e823c3eaa datapathConfiguration="&{false false false false false }" interface=lxc1d70ccec9bcc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fcc019a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fcc019a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=99b6da5738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2452 identity=26161 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99b6da5738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2452 identity=26161 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7ec9ecb684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=54101 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ec9ecb684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=54101 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fcc019a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=14667 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fcc019a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=14667 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99b6da5738 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2452 identity=26161 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99b6da5738 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2452 identity=26161 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ec9ecb684 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3917 identity=54101 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ec9ecb684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3917 identity=54101 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5zthw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fcc019a28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=177 identity=14667 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fcc019a28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=177 identity=14667 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 f86fd684-3d4d-4e34-92a0-735fea126584 default }" containerID=4b2d28d79486b9ec8515b010e33b48d773f167254ecad09d838e6412221e2541 datapathConfiguration="&{false false false false false }" interface=lxc8eba3f90ee90 k8sPodName=monitoring/vector-4772w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b2d28d794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4086 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-4772w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b2d28d794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4086 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-4772w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b2d28d794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4086 identity=27492 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-4772w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b2d28d794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4086 identity=27492 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-4772w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b2d28d794 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4086 identity=27492 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-4772w subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b2d28d794 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4086 identity=27492 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-4772w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 0c2a361d-b003-4f54-b812-dd0f9b1c5dcd default }" containerID=6334a0fa26dcff6beff38b85e1495243790f70a4bd14761d18338e7a579c78c5 datapathConfiguration="&{false false false false false }" interface=lxce6c1c920d216 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6334a0fa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6334a0fa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6334a0fa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identity=33451 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6334a0fa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identity=33451 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6334a0fa26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=856 identity=33451 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6334a0fa26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=856 identity=33451 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 0ec3b912-9289-4fe2-95d9-b3cdac48b628 default }" containerID=5b9f83fcbfe61ba3a0810646182e5fb312bc809e30a9e00ce3428cbd56a8ccf8 datapathConfiguration="&{false false false false false }" interface=lxcdd9bf0d2989f k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b9f83fcbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b9f83fcbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b9f83fcbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=43137 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b9f83fcbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=43137 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b9f83fcbf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3142 identity=43137 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b9f83fcbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3142 identity=43137 ipv4=10.0.0.136 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kfr2j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 73907c39-5151-49a9-a04e-85227cd54ee4 default }" containerID=bbba6b52e94496a564132a291aae533c89cf204fc791f01369727930c90c47a1 datapathConfiguration="&{false false false false false }" interface=lxc8c0303630a6a k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbba6b52e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbba6b52e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bbba6b52e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=59978 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbba6b52e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=59978 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bbba6b52e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=557 identity=59978 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbba6b52e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=557 identity=59978 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-s9rtf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.233 412f7fd6-6841-42b9-8c35-6e435e080378 default }" containerID=f248c9a1329640a0830cce282490634cf8abe2c216830847ddd7ab0029294d41 datapathConfiguration="&{false false false false false }" interface=lxc0882756bb0fa k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f248c9a132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f248c9a132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f248c9a132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=38443 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f248c9a132 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=38443 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f248c9a132 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=629 identity=38443 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f248c9a132 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=629 identity=38443 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 0fb1f849-5eca-460d-91c3-a2d8ff519ac4 default }" containerID=14d9a37eb21131c2acd198c812b4c8c0dc8754a2fb02c82c9317afe5cb7f6040 datapathConfiguration="&{false false false false false }" interface=lxc696d2ea585dc k8sPodName=openstack/keystone-api-64c97f9d7-whdcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14d9a37eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-64c97f9d7-whdcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14d9a37eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-64c97f9d7-whdcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14d9a37eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=34620 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-64c97f9d7-whdcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14d9a37eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=34620 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-64c97f9d7-whdcw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 e00e5ced-c1a1-40bc-9c4c-285af819c96c default }" containerID=742fdbf7b21530c78681c7a93e028357eb9fb24fce75db6c2a429613145fd177 datapathConfiguration="&{false false false false false }" interface=lxc407ddba696af k8sPodName=openstack/keystone-credential-setup-q28zp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=742fdbf7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=742fdbf7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=742fdbf7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=10213 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=742fdbf7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1253 identity=10213 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14d9a37eb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1854 identity=34620 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-64c97f9d7-whdcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=14d9a37eb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1854 identity=34620 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/keystone-api-64c97f9d7-whdcw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=742fdbf7b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1253 identity=10213 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp subsys=endpoint level=info msg="Successful endpoint creation" containerID=742fdbf7b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1253 identity=10213 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=742fdbf7b2 endpointID=1253 k8sNamespace=openstack k8sPodName=keystone-credential-setup-q28zp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=ac52aa27-a424-4cb8-9e1b-62849a628053 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=742fdbf7b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1253 identity=10213 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-credential-setup-q28zp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 6ffdd260-fa6c-43da-ba32-b70b7e9727a8 default }" containerID=c66a0b64d5a269bf779068dd6158388c344cb352f018d7672306eef35e8fe17d datapathConfiguration="&{false false false false false }" interface=lxc0dcab6b9554f k8sPodName=openstack/keystone-db-init-4gqbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c66a0b64d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c66a0b64d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c66a0b64d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=6011 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c66a0b64d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=6011 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c66a0b64d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=121 identity=6011 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c66a0b64d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=6011 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c66a0b64d5 endpointID=121 k8sNamespace=openstack k8sPodName=keystone-db-init-4gqbc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9f61d2a3-9bc1-4b77-9945-f13946a5e26e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c66a0b64d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=6011 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/keystone-db-init-4gqbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 2c9eb218-7a52-40cd-94ee-8e1cb8187202 default }" containerID=4367437219498b8d7b5caa4618174c493050401c9eca29bdedc410553653a702 datapathConfiguration="&{false false false false false }" interface=lxcded6cac78167 k8sPodName=openstack/keystone-fernet-setup-rl8f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4367437219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4367437219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4367437219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4367437219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=44046 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4367437219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=44046 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4367437219 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2428 identity=44046 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4367437219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=44046 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4367437219 endpointID=2428 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rl8f2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ac55d3b2-645e-44ed-a130-c57ae3d24a88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4367437219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=44046 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-fernet-setup-rl8f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 0c9288f6-e3e2-42db-8726-f0acdd9c67f0 default }" containerID=f206544026a50928a78bb8d102b9fb587672483a32bf05bdf405ec089757a40d datapathConfiguration="&{false false false false false }" interface=lxc55d0857849ec k8sPodName=openstack/keystone-db-sync-gs5np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f206544026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3277 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f206544026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3277 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f206544026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3277 identity=12108 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f206544026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3277 identity=12108 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f206544026 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3277 identity=12108 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np subsys=endpoint level=info msg="Successful endpoint creation" containerID=f206544026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3277 identity=12108 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f206544026 endpointID=3277 k8sNamespace=openstack k8sPodName=keystone-db-sync-gs5np subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ab8049c8-0b19-4519-8b03-cfee28beedf6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f206544026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3277 identity=12108 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-db-sync-gs5np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 b02593d2-c11b-4e36-879c-0abebe450214 default }" containerID=19dc1d2b3a4853124c9e72497a35ed1fc203e77784aa5165b1a661896a2aff09 datapathConfiguration="&{false false false false false }" interface=lxc5177939fdb7f k8sPodName=openstack/keystone-rabbit-init-lfcgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19dc1d2b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19dc1d2b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19dc1d2b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identity=23716 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=19dc1d2b3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identity=23716 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19dc1d2b3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1112 identity=23716 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=19dc1d2b3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1112 identity=23716 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq subsys=daemon level=info msg="Delete endpoint request" containerID=19dc1d2b3a endpointID=1112 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-lfcgq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=98fdda93-c5b3-49ab-bd84-c80fff102459 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=19dc1d2b3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1112 identity=23716 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-rabbit-init-lfcgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 d4bd6262-5135-4f01-9c7d-04d41758d038 default }" containerID=b2839d84aae6814ddbcc42858dcdba5c620506593c7e42028a39585c91ae0bb2 datapathConfiguration="&{false false false false false }" interface=lxcfddf17d031d7 k8sPodName=openstack/keystone-domain-manage-8klhk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2839d84aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2839d84aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b2839d84aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b2839d84aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=959 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2839d84aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=959 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2839d84aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=959 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2839d84aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=959 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2839d84aa endpointID=777 k8sNamespace=openstack k8sPodName=keystone-domain-manage-8klhk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=7756896a-5ef5-41de-b4c2-f2ba29bb250f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b2839d84aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=959 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-domain-manage-8klhk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 fb3caf95-95c7-40f5-a5cd-15438fed127e default }" containerID=f4f2c5c1082c82066d248bc87ed421d9b6221b3d72d722bfb57fd895c1301500 datapathConfiguration="&{false false false false false }" interface=lxc72367c47b8e6 k8sPodName=openstack/keystone-bootstrap-rn5rc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4f2c5c108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4f2c5c108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f4f2c5c108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f4f2c5c108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=11750 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4f2c5c108 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=11750 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4f2c5c108 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=418 identity=11750 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4f2c5c108 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=418 identity=11750 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4f2c5c108 endpointID=418 k8sNamespace=openstack k8sPodName=keystone-bootstrap-rn5rc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=18dfd5d6-8773-4c72-a26b-5a83bfb67aee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f4f2c5c108 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=418 identity=11750 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-bootstrap-rn5rc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 1d492944-397a-45bc-849e-209b6a273f5a default }" containerID=2333cca7fc413a3baf0417d8874cd75dd185a7de26952864fc2a0fa310a3c267 datapathConfiguration="&{false false false false false }" interface=lxc152dbd79f677 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2333cca7fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2333cca7fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2333cca7fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=40280 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2333cca7fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=40280 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2333cca7fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1393 identity=40280 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2333cca7fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1393 identity=40280 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 15cc62a4-c3c4-4982-8bf7-5f3198a09dc9 default }" containerID=0759b2c86d4348b3db27a2469d43102d37c402d70c3d8d4ac95c3eb1354b212b datapathConfiguration="&{false false false false false }" interface=lxcca91938b20ee k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0759b2c86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0759b2c86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0759b2c86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0759b2c86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=61622 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0759b2c86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=61622 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 96ddbcab-babd-49ad-900d-c47ff21bc254 default }" containerID=f0b819147b3bfdf51adb8b4a19229af5fe540e8614fdc1c58d547e0059886dbd datapathConfiguration="&{false false false false false }" interface=lxce214ca0bb190 k8sPodName=openstack/barbican-db-init-8scf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0b819147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0b819147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0b819147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=8913 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0b819147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=8913 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0759b2c86d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=907 identity=61622 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0759b2c86d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=61622 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/barbican-api-7d6885cd6f-m9tjg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f0b819147b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3519 identity=8913 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0b819147b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=8913 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f0b819147b endpointID=3519 k8sNamespace=openstack k8sPodName=barbican-db-init-8scf8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=f2e596a1-c6c0-4d7d-bb49-e0742389cf2f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f0b819147b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=8913 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-db-init-8scf8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 515fb7d7-5d24-4b37-87f0-6494e07329d4 default }" containerID=4467611b4f527e32ef55b0d92b69b3cb3dad04b22f4583d436abc5f69091313f datapathConfiguration="&{false false false false false }" interface=lxc81cd3fcb31a3 k8sPodName=openstack/barbican-db-sync-58v4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4467611b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4467611b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4467611b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4467611b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=13046 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4467611b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=13046 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4467611b4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2570 identity=13046 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4467611b4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=13046 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4467611b4f endpointID=2570 k8sNamespace=openstack k8sPodName=barbican-db-sync-58v4t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=f3eec25a-5ec7-4e63-b5ab-d6232e33bf4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4467611b4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=13046 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-58v4t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 ba9e8f19-b6c9-48aa-80df-d12b6f1434ea default }" containerID=82a6461dea811f88cb67fdf18bdd0c7011bcf131527f90fb4a68a8f4702748e5 datapathConfiguration="&{false false false false false }" interface=lxcbda403c777e6 k8sPodName=openstack/barbican-rabbit-init-q2w72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82a6461dea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82a6461dea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82a6461dea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identity=26872 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=82a6461dea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identity=26872 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82a6461dea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3831 identity=26872 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82a6461dea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3831 identity=26872 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 subsys=daemon level=info msg="Delete endpoint request" containerID=82a6461dea endpointID=3831 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-q2w72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4c9aa03b-2336-404b-a74b-1fea1d3ba885 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=82a6461dea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3831 identity=26872 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-rabbit-init-q2w72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 40f86c64-60eb-4fcf-b23f-70ba36b02741 default }" containerID=e3b42f53855cdefeb0e58b6b0f46cf6d6e6cd3365e49f650de189a7859cf73af datapathConfiguration="&{false false false false false }" interface=lxc559c0c43334f k8sPodName=openstack/barbican-ks-service-mc4r2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3b42f5385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3b42f5385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bdf44299-4298-443c-af88-882a260e369b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=bdf44299-4298-443c-af88-882a260e369b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e3b42f5385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bdf44299-4298-443c-af88-882a260e369b;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=bdf44299-4298-443c-af88-882a260e369b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3b42f5385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=20519 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bdf44299-4298-443c-af88-882a260e369b,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=bdf44299-4298-443c-af88-882a260e369b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3b42f5385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=20519 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3b42f5385 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=608 identity=20519 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3b42f5385 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=20519 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e3b42f5385 endpointID=608 k8sNamespace=openstack k8sPodName=barbican-ks-service-mc4r2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bdf44299-4298-443c-af88-882a260e369b k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=bdf44299-4298-443c-af88-882a260e369b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e3b42f5385 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=20519 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-service-mc4r2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 e9d0cfa9-07ec-4997-8d35-0eccf25c9821 default }" containerID=6d097401c8279b9ad3aa9743d6e58c5a5bf5d6c1e4c2cf922c270a2724497b50 datapathConfiguration="&{false false false false false }" interface=lxc226f670b2d17 k8sPodName=openstack/barbican-ks-endpoints-rx4sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d097401c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d097401c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d097401c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=10824 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d097401c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=10824 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d097401c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=768 identity=10824 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d097401c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=10824 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d097401c8 endpointID=768 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rx4sn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=32cb0f60-2c57-4630-a644-cfde9f83f110 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6d097401c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=10824 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rx4sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 62cfef4b-d368-4817-9ee4-bba23f0a6fd1 default }" containerID=a26d44b5277420c147c7639d421d2e70bcd09994ef8b49a7d3784055f578573e datapathConfiguration="&{false false false false false }" interface=lxc368794dcf08e k8sPodName=openstack/barbican-ks-user-sgjqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a26d44b527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a26d44b527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a26d44b527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=17590 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a26d44b527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=17590 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a26d44b527 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=651 identity=17590 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a26d44b527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=17590 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a26d44b527 endpointID=651 k8sNamespace=openstack k8sPodName=barbican-ks-user-sgjqh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=1cf6e2b8-7fbb-4c01-8f4a-fec1f7fb852e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a26d44b527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=17590 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-user-sgjqh subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.118 8502e43e-2f3b-4b9d-b042-26ec5d87b4b1 default }" containerID=3575805a430642b897f267ae1dfc4b75641f7884a2e53f8446fb401a601974f8 datapathConfiguration="&{false false false false false }" interface=lxc7d34e3a47177 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3575805a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 ipv4=10.0.0.118 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3575805a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.118 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3575805a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=18576 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.118 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3575805a43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=18576 ipv4=10.0.0.118 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3575805a43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2678 identity=18576 ipv4=10.0.0.118 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d subsys=endpoint level=info msg="Successful endpoint creation" containerID=3575805a43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2678 identity=18576 ipv4=10.0.0.118 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-gm97d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 16538e65-eb1b-424b-beae-776561964dc1 default }" containerID=f03b228a32a686210ce3dbb06c64a8fa9d5295b58668161c8f4fd10242d7c0d7 datapathConfiguration="&{false false false false false }" interface=lxc87a78573e9d3 k8sPodName=openstack/rook-ceph-detect-version-w995b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f03b228a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f03b228a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f03b228a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=32820 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f03b228a32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=32820 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f03b228a32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3914 identity=32820 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f03b228a32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3914 identity=32820 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f03b228a32 endpointID=3914 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-w995b subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=279b7b42-0bb9-481a-830e-2db835ac164f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f03b228a32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3914 identity=32820 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w995b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 0bfc2f8d-c85d-4a85-bf1e-ddd858f0ec9d default }" containerID=f88273a98192b0d8d0910a56674d1ea70a20f45e317638f41f3a26ce33ba4af9 datapathConfiguration="&{false false false false false }" interface=lxc12e74944e996 k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f88273a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f88273a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1631c953-a59d-4e71-ab44-79667571f524,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1631c953-a59d-4e71-ab44-79667571f524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1631c953-a59d-4e71-ab44-79667571f524;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1631c953-a59d-4e71-ab44-79667571f524;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f88273a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=28134 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1631c953-a59d-4e71-ab44-79667571f524,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1631c953-a59d-4e71-ab44-79667571f524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f88273a981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=28134 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f88273a981 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=28134 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps subsys=endpoint level=info msg="Successful endpoint creation" containerID=f88273a981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=28134 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f88273a981 endpointID=52 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-tz2ps subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1631c953-a59d-4e71-ab44-79667571f524 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1631c953-a59d-4e71-ab44-79667571f524 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f88273a981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=28134 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tz2ps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 839f75d7-4094-4dd0-bee5-a93c6a0303b2 default }" containerID=6098a5ead7287f8957da4d0bc3008eb1f44ac82cf25bda8304dc1df6c4dc5903 datapathConfiguration="&{false false false false false }" interface=lxc118bc939efa2 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6098a5ead7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6098a5ead7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6098a5ead7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=31366 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6098a5ead7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=31366 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6098a5ead7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=31366 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6098a5ead7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=31366 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 ce317ed7-dd09-4793-8caf-50166378ae55 default }" containerID=64b0d2035c29826c69b73a32399bb3e26f9b3917ee2ff1298fedec7b24e2dbee datapathConfiguration="&{false false false false false }" interface=lxc9d564d77557e k8sPodName=openstack/glance-db-init-qclgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64b0d2035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64b0d2035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64b0d2035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64b0d2035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=7456 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64b0d2035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=7456 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64b0d2035c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1009 identity=7456 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=64b0d2035c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1009 identity=7456 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 45f28f9b-cb05-4e6d-ba0f-8a3d15ed466d default }" containerID=4b6957e17f216c5f991ba0a83d71cf4f862d4c5291dd9598977940b347a0158c datapathConfiguration="&{false false false false false }" interface=lxc7090d8635fee k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b6957e17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b6957e17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b6957e17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=34828 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b6957e17f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=34828 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 564d124b-2671-45e1-91b3-920d8304e369 default }" containerID=aaebff89ba2443b4951a21023ae46c72591d4d7b110a8f325fdaccec88895700 datapathConfiguration="&{false false false false false }" interface=lxcd54a000a5cd0 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaebff89ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaebff89ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaebff89ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=1787 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaebff89ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=1787 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b6957e17f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=286 identity=34828 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b6957e17f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=34828 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-w29nb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aaebff89ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2116 identity=1787 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaebff89ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2116 identity=1787 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bhbf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64b0d2035c endpointID=1009 k8sNamespace=openstack k8sPodName=glance-db-init-qclgb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ab18ad00-a14d-4aa6-8aec-7201d71caa76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=64b0d2035c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1009 identity=7456 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-db-init-qclgb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 dcff2aa2-4701-4755-a256-947481c8f49d default }" containerID=0012ce74d7358e90932f536066edde50442a84985499fa9ca2873283ea838d5f datapathConfiguration="&{false false false false false }" interface=lxc2d0a5bf746da k8sPodName=openstack/glance-db-sync-54b2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0012ce74d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0012ce74d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0012ce74d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=44528 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0012ce74d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=44528 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0012ce74d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2073 identity=44528 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=0012ce74d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=44528 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v subsys=daemon level=info msg="Delete endpoint request" containerID=0012ce74d7 endpointID=2073 k8sNamespace=openstack k8sPodName=glance-db-sync-54b2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=e723dd25-c396-426b-a94c-1d67d51ee881 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0012ce74d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=44528 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-db-sync-54b2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 25838c37-26bd-4c8b-8bae-df794f7a753c default }" containerID=a9f869995d662bd76fb4a1cdab0e5ed7287043e8a611b83b06f95e19cc7ba031 datapathConfiguration="&{false false false false false }" interface=lxcaf4a638c30b3 k8sPodName=openstack/glance-rabbit-init-m8lk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9f869995d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9f869995d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9f869995d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=12591 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9f869995d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=12591 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a9f869995d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1542 identity=12591 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9f869995d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1542 identity=12591 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 subsys=daemon level=info msg="Delete endpoint request" containerID=a9f869995d endpointID=1542 k8sNamespace=openstack k8sPodName=glance-rabbit-init-m8lk8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ca84db70-800e-44fd-aa7a-8ffd4f2d5568 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a9f869995d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1542 identity=12591 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-m8lk8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 a0f2b95a-2124-4491-b9bd-f1d578b1c2bb default }" containerID=8e609a151c469bc407c135f69ff463ce54d904eb48027dda99958d436b4caa64 datapathConfiguration="&{false false false false false }" interface=lxcdd762fb57b53 k8sPodName=openstack/glance-ks-service-kqdw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e609a151c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e609a151c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e609a151c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=3583 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e609a151c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3377 identity=3583 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e609a151c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3377 identity=3583 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e609a151c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=3583 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e609a151c endpointID=3377 k8sNamespace=openstack k8sPodName=glance-ks-service-kqdw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=70e3f272-ddf3-422d-a4b1-98e2aa5b59a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e609a151c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3377 identity=3583 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-service-kqdw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 b1249f64-2485-4e64-92df-262448bd6ea1 default }" containerID=82c16201f144bf9a2c47ffccf8e2eb0163cc3316c3b6cf8e87bc8d8e19260e4f datapathConfiguration="&{false false false false false }" interface=lxc4250206c6084 k8sPodName=openstack/glance-ks-endpoints-6h4z9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82c16201f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82c16201f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82c16201f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=3071 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82c16201f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=3071 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=82c16201f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=3071 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82c16201f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=3071 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 subsys=daemon level=info msg="Delete endpoint request" containerID=82c16201f1 endpointID=1119 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-6h4z9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cf44f758-0b3b-4b54-9405-b3b25773161a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=82c16201f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=3071 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-6h4z9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 ac8a1e27-4f0b-44d7-883f-93fbea37e2a7 default }" containerID=dc17f0f0a4e63130875cd37160aa896d4163c62b03dbedba18a4a56a5c1bb7c5 datapathConfiguration="&{false false false false false }" interface=lxcb4e8954829e3 k8sPodName=openstack/glance-ks-user-whv9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc17f0f0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc17f0f0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc17f0f0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc17f0f0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=17904 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc17f0f0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=17904 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc17f0f0a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3493 identity=17904 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc17f0f0a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3493 identity=17904 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc17f0f0a4 endpointID=3493 k8sNamespace=openstack k8sPodName=glance-ks-user-whv9r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=40d68c21-c56c-41bc-bb6d-28e1f0236e4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dc17f0f0a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3493 identity=17904 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-whv9r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 170c25d2-f692-4e57-8c38-5f23311c02f3 default }" containerID=0623c063669b7890453f9e35d5caa01e66eae65354faecc9871306aaea42f071 datapathConfiguration="&{false false false false false }" interface=lxc259a975926c2 k8sPodName=openstack/glance-metadefs-load-fg5sh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0623c06366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0623c06366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b2049211-e261-42a4-8edb-c07713a85944,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b2049211-e261-42a4-8edb-c07713a85944,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b2049211-e261-42a4-8edb-c07713a85944;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b2049211-e261-42a4-8edb-c07713a85944;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0623c06366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=53773 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b2049211-e261-42a4-8edb-c07713a85944,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b2049211-e261-42a4-8edb-c07713a85944,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0623c06366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=53773 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0623c06366 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1556 identity=53773 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0623c06366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1556 identity=53773 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0623c06366 endpointID=1556 k8sNamespace=openstack k8sPodName=glance-metadefs-load-fg5sh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b2049211-e261-42a4-8edb-c07713a85944 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b2049211-e261-42a4-8edb-c07713a85944 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0623c06366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1556 identity=53773 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-metadefs-load-fg5sh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 2c931226-70cd-4baa-aa6b-bc9b769e4fbb default }" containerID=4c69dab76da6f86755a6215fbb949ae89d68e69f4b3ca0845f5c10572f421c83 datapathConfiguration="&{false false false false false }" interface=lxc93cb7302af4b k8sPodName=openstack/glance-storage-init-mrpfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c69dab76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c69dab76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=68a85731-459f-42af-85f2-43c9e6f01889,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=68a85731-459f-42af-85f2-43c9e6f01889,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=68a85731-459f-42af-85f2-43c9e6f01889;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=68a85731-459f-42af-85f2-43c9e6f01889;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c69dab76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=2049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=68a85731-459f-42af-85f2-43c9e6f01889,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=68a85731-459f-42af-85f2-43c9e6f01889,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c69dab76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1275 identity=2049 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c69dab76d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1275 identity=2049 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c69dab76d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1275 identity=2049 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c69dab76d endpointID=1275 k8sNamespace=openstack k8sPodName=glance-storage-init-mrpfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=68a85731-459f-42af-85f2-43c9e6f01889 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=68a85731-459f-42af-85f2-43c9e6f01889 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4c69dab76d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1275 identity=2049 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-mrpfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 307905dc-94b1-45cb-bd1d-db437fd17975 default }" containerID=07856a624ef20585ab552383b9948184f63b526645aee1493d2f488893a7607c datapathConfiguration="&{false false false false false }" interface=lxc50fd2208ebb6 k8sPodName=openstack/glance-api-6974b59cbf-2xfkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07856a624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-api-6974b59cbf-2xfkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07856a624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-api-6974b59cbf-2xfkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=07856a624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=50409 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-api-6974b59cbf-2xfkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07856a624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=50409 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-api-6974b59cbf-2xfkw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07856a624e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1207 identity=50409 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-api-6974b59cbf-2xfkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=07856a624e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=50409 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-api-6974b59cbf-2xfkw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 48375db2-0406-4b88-9745-c8d595db243d default }" containerID=daadef46e3eaf028d0eb05aac264ad1abf1c6f84fbf827bcc00d278ead4cb0ae datapathConfiguration="&{false false false false false }" interface=lxc279e60d86b01 k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.65 da20454a-b76f-43f4-a717-5237d641144e default }" containerID=5af9a1e8dd2bde6ec0b935471ed243703826e96684b781b353fba9bcb39cb71a datapathConfiguration="&{false false false false false }" interface=lxce0d8b54443c5 k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daadef46e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx subsys=endpoint level=info msg="New endpoint" containerID=5af9a1e8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5af9a1e8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daadef46e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5af9a1e8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=32682 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5af9a1e8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=32682 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=daadef46e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daadef46e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=5654 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daadef46e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=5654 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 2b43c3d7-505b-4814-92d9-c5e9be354cc6 default }" containerID=7c01153ab9b58aef2ff38a857399c2b0342b0a5d6350f7d431f9dd24d797069c datapathConfiguration="&{false false false false false }" interface=lxc65a9c4a284d3 k8sPodName=openstack/staffeln-db-init-5qr5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c01153ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c01153ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c01153ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=49456 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c01153ab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=49456 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5af9a1e8dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1624 identity=32682 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5af9a1e8dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1624 identity=32682 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-api-b78ccfccd-pmzlv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=daadef46e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=235 identity=5654 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=daadef46e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=235 identity=5654 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-77f6f4f967-dbcrx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7c01153ab9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=273 identity=49456 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c01153ab9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=273 identity=49456 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c01153ab9 endpointID=273 k8sNamespace=openstack k8sPodName=staffeln-db-init-5qr5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=47c383b2-9c4f-4155-8dc6-3d0c8ce412ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7c01153ab9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=273 identity=49456 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-db-init-5qr5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 025de04d-41b8-45bc-b277-784210208b43 default }" containerID=7b5273c8bd24bd23369cd3c6855781f95a55e8e23d6540237f04a428764b8ca9 datapathConfiguration="&{false false false false false }" interface=lxc1ed10579fe8a k8sPodName=openstack/staffeln-db-sync-t5s4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b5273c8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b5273c8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b5273c8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=63848 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7b5273c8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=63848 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b5273c8bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=63848 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b5273c8bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=63848 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7b5273c8bd endpointID=153 k8sNamespace=openstack k8sPodName=staffeln-db-sync-t5s4w subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770 k8s:batch.kubernetes.io/job-name=staffeln-db-sync k8s:component=db-sync k8s:controller-uid=445a558a-d389-4351-9310-ab9c6c7ce770 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-sync k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7b5273c8bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=63848 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-db-sync-t5s4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 90a942a5-3564-41a2-9f44-5df442e088e2 default }" containerID=9de969aa4a99c1688efa038e8b6815c29b59e1253a24e8801997808bdc0c16d5 datapathConfiguration="&{false false false false false }" interface=lxcff7069d53621 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9de969aa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9de969aa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9de969aa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=9756 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9de969aa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=9756 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9de969aa4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=244 identity=9756 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9de969aa4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=9756 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 a86a21e0-ad43-49e1-ad1b-26a62470dab7 default }" containerID=4d4b4e08652f52d839f651fbcb70cb314903ad90a2f2da866027625f9ba44b4e datapathConfiguration="&{false false false false false }" interface=lxcd408077aeffd k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d4b4e0865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d4b4e0865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d4b4e0865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=47492 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d4b4e0865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=47492 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 93eb4ec8-982b-4987-9199-78bf8c9f6059 default }" containerID=c6f7b0e45b044532c2fb60e15f829f187ab1cfea423f319cf0ca280ca578721a datapathConfiguration="&{false false false false false }" interface=lxc6e2e3201f642 k8sPodName=openstack/cinder-api-b9b4f787b-96vpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6f7b0e45b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-api-b9b4f787b-96vpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6f7b0e45b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-api-b9b4f787b-96vpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6f7b0e45b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=1484 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-api-b9b4f787b-96vpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6f7b0e45b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=1484 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-api-b9b4f787b-96vpc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 f34e04f5-40f5-4897-b370-38b4b2f762c6 default }" containerID=96af4c098478d3e55ff76c9e188e4560f7cba95a4f307cc6bbe13afae3523743 datapathConfiguration="&{false false false false false }" interface=lxcdf1605bd65fc k8sPodName=openstack/cinder-db-init-5c8mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96af4c0984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96af4c0984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96af4c0984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=707 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96af4c0984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=707 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d4b4e0865 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3389 identity=47492 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d4b4e0865 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3389 identity=47492 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/cinder-scheduler-5cc976444-dmjw6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c6f7b0e45b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=1484 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-api-b9b4f787b-96vpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6f7b0e45b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=1484 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/cinder-api-b9b4f787b-96vpc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=96af4c0984 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3844 identity=707 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=96af4c0984 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=707 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96af4c0984 endpointID=3844 k8sNamespace=openstack k8sPodName=cinder-db-init-5c8mz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=eba5f230-1ef6-4de5-aacd-10a28d80571f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=96af4c0984 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=707 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/cinder-db-init-5c8mz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 f621b5e7-09b4-4ba3-b0b5-7d76193de71b default }" containerID=86fd2c37bbad4fef362cbb82a45429e88c920d7f5550a0e28680ab39f263582e datapathConfiguration="&{false false false false false }" interface=lxcbef8e6fc1d41 k8sPodName=openstack/cinder-db-sync-srr6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86fd2c37bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86fd2c37bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86fd2c37bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=63557 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86fd2c37bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=63557 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86fd2c37bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=225 identity=63557 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=86fd2c37bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=225 identity=63557 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86fd2c37bb endpointID=225 k8sNamespace=openstack k8sPodName=cinder-db-sync-srr6j subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=59f92c6d-0993-4188-b52f-fbefd2956b15 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=86fd2c37bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=225 identity=63557 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-db-sync-srr6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 80802ec3-af0e-4519-9c2f-cf6593ed89b9 default }" containerID=3102f5cdc2d8f1028e06597d16fa9a8271209e658f2f7837589d8cd3655c052d datapathConfiguration="&{false false false false false }" interface=lxc8c2d0f522d23 k8sPodName=openstack/cinder-rabbit-init-nskq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3102f5cdc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3102f5cdc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=97998121-1b91-42ca-9715-3e1f67593045,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=97998121-1b91-42ca-9715-3e1f67593045,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=97998121-1b91-42ca-9715-3e1f67593045;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=97998121-1b91-42ca-9715-3e1f67593045;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3102f5cdc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identity=40610 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=97998121-1b91-42ca-9715-3e1f67593045,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=97998121-1b91-42ca-9715-3e1f67593045,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3102f5cdc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identity=40610 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3102f5cdc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1402 identity=40610 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3102f5cdc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1402 identity=40610 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 subsys=daemon level=info msg="Delete endpoint request" containerID=3102f5cdc2 endpointID=1402 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-nskq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=97998121-1b91-42ca-9715-3e1f67593045 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=97998121-1b91-42ca-9715-3e1f67593045 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=3102f5cdc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1402 identity=40610 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/cinder-rabbit-init-nskq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 7dbb2ab7-dbf8-47ff-95b3-beef0f6e7fd7 default }" containerID=d1deeae23a024b681ee592a7f2ac8455a10db0fbc1bec9a76f7608403acd85f8 datapathConfiguration="&{false false false false false }" interface=lxc425b6e478f3b k8sPodName=openstack/cinder-ks-service-xpgbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1deeae23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1deeae23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1deeae23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=28695 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1deeae23a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=28695 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d1deeae23a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=132 identity=28695 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1deeae23a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=28695 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc subsys=daemon level=info msg="Delete endpoint request" containerID=d1deeae23a endpointID=132 k8sNamespace=openstack k8sPodName=cinder-ks-service-xpgbc subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=5e6648a4-00fb-4d83-a91b-0020bc9c9f34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d1deeae23a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=28695 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/cinder-ks-service-xpgbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 2d79b22c-e7bb-44dd-a624-db3b8d04f781 default }" containerID=46827699392af3a59c32701e84167f2d7bafd9cf57d245d354ad1156987cd48b datapathConfiguration="&{false false false false false }" interface=lxcfe2dd14f363a k8sPodName=openstack/cinder-ks-endpoints-tl4nf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4682769939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4682769939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4682769939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=5659 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4682769939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=5659 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4682769939 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=972 identity=5659 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4682769939 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=5659 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4682769939 endpointID=972 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-tl4nf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f900f1aa-a80b-419a-a82c-7effe5c3576e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4682769939 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=972 identity=5659 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/cinder-ks-endpoints-tl4nf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 3d027db2-469f-4adf-868b-9e13ab1cf68f default }" containerID=2973f01fa0fd4f9468bf9cab59940969ff116fd8592736b076361d12101d26ae datapathConfiguration="&{false false false false false }" interface=lxc2a8b32a18637 k8sPodName=openstack/cinder-ks-user-vm7qf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2973f01fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2973f01fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2973f01fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=7148 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2973f01fa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=7148 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2973f01fa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1915 identity=7148 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2973f01fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=7148 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2973f01fa0 endpointID=1915 k8sNamespace=openstack k8sPodName=cinder-ks-user-vm7qf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15 k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=df91043e-803a-47fc-98a6-6fe5170cab15 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=2973f01fa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1915 identity=7148 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/cinder-ks-user-vm7qf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 0679068e-11bb-44f9-a692-4fe3b5f1f627 default }" containerID=89000053f06ed771d1bd41e96d457d93688b38888feea32574abb9da4c6234fb datapathConfiguration="&{false false false false false }" interface=lxcf31c39836cba k8sPodName=openstack/cinder-backup-storage-init-r88nq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89000053f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89000053f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89000053f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=62548 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89000053f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=62548 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89000053f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3399 identity=62548 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq subsys=endpoint level=info msg="Successful endpoint creation" containerID=89000053f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3399 identity=62548 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89000053f0 endpointID=3399 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-r88nq subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=53dc3091-4dd5-4402-b0f6-b2ce959fcb79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=89000053f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3399 identity=62548 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-storage-init-r88nq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 259ee07a-29b1-4b7e-8661-b45724c753bb default }" containerID=367d1b0eb1a099d75c21c0e753b3a8ea96577db0a1c26bf352d69ce4dfe03204 datapathConfiguration="&{false false false false false }" interface=lxc5ef503a8dda8 k8sPodName=openstack/cinder-create-internal-tenant-28fqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=367d1b0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=367d1b0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a83d23d7-e697-46fd-8aee-89857b408579,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=a83d23d7-e697-46fd-8aee-89857b408579,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=a83d23d7-e697-46fd-8aee-89857b408579;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=a83d23d7-e697-46fd-8aee-89857b408579;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=367d1b0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 identity=12844 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=a83d23d7-e697-46fd-8aee-89857b408579,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=a83d23d7-e697-46fd-8aee-89857b408579,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=367d1b0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2414 identity=12844 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=367d1b0eb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2414 identity=12844 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=367d1b0eb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2414 identity=12844 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=367d1b0eb1 endpointID=2414 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-28fqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=a83d23d7-e697-46fd-8aee-89857b408579 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=a83d23d7-e697-46fd-8aee-89857b408579 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=367d1b0eb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2414 identity=12844 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-28fqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 ca10b7e3-9fc4-4569-8528-9b6f96cb1882 default }" containerID=d3422bbadd5a5758687d669e1b43096382b3dc9ec2ea44ee6f0dfcc540718660 datapathConfiguration="&{false false false false false }" interface=lxc02cc331f3b0f k8sPodName=openstack/cinder-storage-init-jdh4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3422bbadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3422bbadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d3422bbadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3422bbadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=16694 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3422bbadd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=16694 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3422bbadd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2220 identity=16694 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3422bbadd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2220 identity=16694 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3422bbadd endpointID=2220 k8sNamespace=openstack k8sPodName=cinder-storage-init-jdh4f subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=98e70f5d-4534-4e43-aeae-f26312c397ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=d3422bbadd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2220 identity=16694 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/cinder-storage-init-jdh4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 62260a59-f0d2-4b52-9ff1-37aba18ae4d1 default }" containerID=b0efc7b432f276bf380d362d9cb12cb7eb05d42e3e67493ac2cd295f9d7b8ddb datapathConfiguration="&{false false false false false }" interface=lxc62bf1703f092 k8sPodName=openstack/cinder-bootstrap-d24cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0efc7b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0efc7b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b0efc7b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0efc7b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=20476 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0efc7b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=20476 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0efc7b432 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=20476 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0efc7b432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=20476 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 d0aafe66-e9b6-444d-b2ee-8b8d8ae6f2f9 default }" containerID=5fd1b0ca002ffe729f61b827e585f24f9e744282849d05a12d696d72443a60ce datapathConfiguration="&{false false false false false }" interface=lxcf1bc290b35cb k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fd1b0ca00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fd1b0ca00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fd1b0ca00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identity=43155 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fd1b0ca00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identity=43155 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 1843582f-5214-4a62-9dc3-22d5054f6823 default }" containerID=6867adeb16be4672f5eefa1143831dc0c101b1caac8f5e33d51b8695a0a399d3 datapathConfiguration="&{false false false false false }" interface=lxcec81bb714725 k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6867adeb16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6867adeb16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6867adeb16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 identity=42847 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6867adeb16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1776 identity=42847 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fd1b0ca00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2259 identity=43155 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fd1b0ca00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2259 identity=43155 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/cinder-backup-6bcd77776-mtdrj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6867adeb16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1776 identity=42847 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6867adeb16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1776 identity=42847 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/cinder-volume-7dbcb74cd8-7wsc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0efc7b432 endpointID=164 k8sNamespace=openstack k8sPodName=cinder-bootstrap-d24cf subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=3cd38f76-38ac-4d24-93b3-8c36d5e41673 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=b0efc7b432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=20476 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/cinder-bootstrap-d24cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 2ef7a906-3eb7-4c53-a865-5e552c402da0 default }" containerID=85ca37a09b42ead4bbc5e50e35200a3365cd82d1f01d3859f805970ee69d6e1b datapathConfiguration="&{false false false false false }" interface=lxcbbd376dc89bf k8sPodName=openstack/placement-api-68fbb878fc-tjvxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85ca37a09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85ca37a09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=85ca37a09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=85ca37a09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 identity=36403 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85ca37a09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1930 identity=36403 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 7db34c8b-5232-483e-82a9-bdb9e3935a42 default }" containerID=23edf5b4b7b04099fa4eb702623eb08104eea054649c54ad27c88e2798d6c1f0 datapathConfiguration="&{false false false false false }" interface=lxc3c78f4e823a0 k8sPodName=openstack/placement-db-init-l6fbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23edf5b4b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23edf5b4b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23edf5b4b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=38091 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23edf5b4b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=38091 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85ca37a09b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1930 identity=36403 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=85ca37a09b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1930 identity=36403 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/placement-api-68fbb878fc-tjvxm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23edf5b4b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1269 identity=38091 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=23edf5b4b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=38091 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23edf5b4b7 endpointID=1269 k8sNamespace=openstack k8sPodName=placement-db-init-l6fbd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=1eb9a561-8add-4320-98bf-9f1173ca26d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=23edf5b4b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=38091 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/placement-db-init-l6fbd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 14b76a94-f664-4475-a600-82d4398d61f0 default }" containerID=a11f8be4802662bbaebfd5cd067af76c6e681b98ab576f421a1d436aede87b76 datapathConfiguration="&{false false false false false }" interface=lxc880129a7c98e k8sPodName=openstack/placement-db-sync-8t4hj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a11f8be480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a11f8be480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=34274ba6-3aed-410a-b984-a84a655adc37,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=34274ba6-3aed-410a-b984-a84a655adc37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=34274ba6-3aed-410a-b984-a84a655adc37;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=34274ba6-3aed-410a-b984-a84a655adc37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a11f8be480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=17765 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=34274ba6-3aed-410a-b984-a84a655adc37,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=34274ba6-3aed-410a-b984-a84a655adc37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a11f8be480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=17765 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a11f8be480 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=206 identity=17765 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a11f8be480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=17765 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj subsys=daemon level=info msg="Delete endpoint request" containerID=a11f8be480 endpointID=206 k8sNamespace=openstack k8sPodName=placement-db-sync-8t4hj subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=34274ba6-3aed-410a-b984-a84a655adc37 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=34274ba6-3aed-410a-b984-a84a655adc37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a11f8be480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=17765 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/placement-db-sync-8t4hj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 f7aa995d-f91c-4cd0-a98b-45450b81c4fc default }" containerID=fd381d2fabfaa02a1d20d3655a89f75eaae1dd88ebe05460af3169c35ee28cde datapathConfiguration="&{false false false false false }" interface=lxcd6484ccc03b4 k8sPodName=openstack/placement-ks-service-d4tkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd381d2fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd381d2fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=debe51eb-c542-4703-951f-ada15c274f89,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=debe51eb-c542-4703-951f-ada15c274f89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=debe51eb-c542-4703-951f-ada15c274f89;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=debe51eb-c542-4703-951f-ada15c274f89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd381d2fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=34219 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=debe51eb-c542-4703-951f-ada15c274f89,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=debe51eb-c542-4703-951f-ada15c274f89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd381d2fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=34219 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd381d2fab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=218 identity=34219 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd381d2fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=218 identity=34219 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg subsys=daemon level=info msg="Delete endpoint request" containerID=fd381d2fab endpointID=218 k8sNamespace=openstack k8sPodName=placement-ks-service-d4tkg subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=debe51eb-c542-4703-951f-ada15c274f89 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=debe51eb-c542-4703-951f-ada15c274f89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=fd381d2fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=218 identity=34219 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/placement-ks-service-d4tkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 9d3f0d8b-62cd-4e12-8168-54cc757467b0 default }" containerID=18b77b4a2d10aedc69df082aa4dec7819aaccc6249915643bd8ee5fbd16ac78f datapathConfiguration="&{false false false false false }" interface=lxccc8142989f02 k8sPodName=openstack/placement-ks-user-2qx22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18b77b4a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18b77b4a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18b77b4a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18b77b4a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identity=33394 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18b77b4a2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identity=33394 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18b77b4a2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2400 identity=33394 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18b77b4a2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2400 identity=33394 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18b77b4a2d endpointID=2400 k8sNamespace=openstack k8sPodName=placement-ks-user-2qx22 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=e5571b70-7b52-4866-92a1-2dd9d7d6912e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=18b77b4a2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2400 identity=33394 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/placement-ks-user-2qx22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 4adbca97-4857-4dea-bf3e-214f74690d75 default }" containerID=12d66b34ef547c1549816b0ee24f4976ac6ee9e1f51a5b55c8d7211909212957 datapathConfiguration="&{false false false false false }" interface=lxc201506e43770 k8sPodName=openstack/placement-ks-endpoints-jqg64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12d66b34ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4033 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12d66b34ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4033 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12d66b34ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4033 identity=41202 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12d66b34ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4033 identity=41202 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=12d66b34ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4033 identity=41202 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12d66b34ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4033 identity=41202 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 subsys=daemon level=info msg="Delete endpoint request" containerID=12d66b34ef endpointID=4033 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-jqg64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2ee9be03-cb0a-4216-ae32-1c00636668ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=12d66b34ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4033 identity=41202 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/placement-ks-endpoints-jqg64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 6115879a-5916-44c1-8c37-17ef9c34c499 default }" containerID=d099b0d03abb8cfd59cfa8d05bdc1b92a6102c0c7e1ae2063a793ee9cf887c85 datapathConfiguration="&{false false false false false }" interface=lxcd74744fb0de7 k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d099b0d03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d099b0d03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:component=ovn-northd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d099b0d03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=22162 identityLabels="k8s:application=ovn,k8s:component=ovn-northd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-northd,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d099b0d03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1410 identity=22162 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d099b0d03a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1410 identity=22162 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d099b0d03a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1410 identity=22162 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ovn-northd-7659bd74f8-8kx68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 c6566e15-f2f9-4719-a8f9-771c45a99854 default }" containerID=852789f21a4a19caed757d785bb2675cd311edf584508fe2c1b60536188cbaf1 datapathConfiguration="&{false false false false false }" interface=lxc477abf840b35 k8sPodName=openstack/ovn-ovsdb-nb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=852789f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=852789f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-nb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=852789f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=15678 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-nb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-nb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-nb-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=852789f21a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3449 identity=15678 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 a31416e1-9de6-433b-9e89-a02b46a7adb2 default }" containerID=1151fa0421a6927e962b304052ae8e23914d7392fcb3937caf8367038c26d6d6 datapathConfiguration="&{false false false false false }" interface=lxcc4e6159c1178 k8sPodName=openstack/ovn-ovsdb-sb-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1151fa0421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1151fa0421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=ovn;k8s:apps.kubernetes.io/pod-index=0;k8s:component=ovn-ovsdb-sb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=ovn;k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1151fa0421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=15672 identityLabels="k8s:application=ovn,k8s:apps.kubernetes.io/pod-index=0,k8s:component=ovn-ovsdb-sb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ovn-ovsdb-sb,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=ovn,k8s:statefulset.kubernetes.io/pod-name=ovn-ovsdb-sb-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1151fa0421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=15672 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=852789f21a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3449 identity=15678 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=852789f21a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3449 identity=15678 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/ovn-ovsdb-nb-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1151fa0421 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3301 identity=15672 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1151fa0421 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3301 identity=15672 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/ovn-ovsdb-sb-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 f3c8f405-e51a-4b5c-9b03-d45856a1a6e3 default }" containerID=28576126a4fb40e7afef8472d72a8618954826574760589e1180184ed2f0e174 datapathConfiguration="&{false false false false false }" interface=lxc00b7d4232f1a k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28576126a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28576126a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28576126a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=20073 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28576126a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3910 identity=20073 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28576126a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3910 identity=20073 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28576126a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3910 identity=20073 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 e1da8151-bcb7-446c-a98a-1a9f26884635 default }" containerID=45fe918820ea8f92728bf0c8e13ae0446881e65a050f8fb77cd824d752e3d898 datapathConfiguration="&{false false false false false }" interface=lxc72157d81c5df k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45fe918820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45fe918820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=45fe918820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=45fe918820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=27142 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45fe918820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2392 identity=27142 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 15f48385-0130-42b0-8b71-476ee17fd10b default }" containerID=45d25e6d2e4a39e1fd8bb70466da96d4958aa785150bf6a280639ef92846a70b datapathConfiguration="&{false false false false false }" interface=lxc17f56303eaa8 k8sPodName=openstack/nova-cell-setup-7cfmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45d25e6d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/nova-cell-setup-7cfmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45d25e6d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1255dbcd-68e3-49d5-b73f-12faa0c4f29c,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=1255dbcd-68e3-49d5-b73f-12faa0c4f29c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/nova-cell-setup-7cfmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.57 0403f651-cd92-432b-8745-f92e21fe2181 default }" containerID=b006350434472ef142b4a4736025c58c6fc00d1716f731ab2ff17276eaeb0752 datapathConfiguration="&{false false false false false }" interface=lxca309c8b995dc k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b006350434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b006350434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1255dbcd-68e3-49d5-b73f-12faa0c4f29c;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=1255dbcd-68e3-49d5-b73f-12faa0c4f29c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=45d25e6d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=31959 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1255dbcd-68e3-49d5-b73f-12faa0c4f29c,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=1255dbcd-68e3-49d5-b73f-12faa0c4f29c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/nova-cell-setup-7cfmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45d25e6d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=31959 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/nova-cell-setup-7cfmm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b006350434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=17494 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b006350434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=17494 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 e670e91f-ec7c-4e53-9cdc-ceb6215facc5 default }" containerID=f06758d10fd60189ffd737585e2946d1ebb68dbd03591b884ed1338ee7bdf13b datapathConfiguration="&{false false false false false }" interface=lxc09d7a473f07f k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f06758d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f06758d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f06758d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=1063 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f06758d10f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1875 identity=1063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 e629a69e-78e4-4a94-adb9-4587b761e078 default }" containerID=c7481c1e7684ce5548e35ac846f43ccc608fae7356d25da11323d0c685fa77f4 datapathConfiguration="&{false false false false false }" interface=lxc1c1b4f6f7bc1 k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7481c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7481c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 d866d953-c167-4466-967d-0b192bdd8d38 default }" containerID=0b67053a74291a2c432678bcda720778cf88bfa54030c8e344e86f7c38eb1151 datapathConfiguration="&{false false false false false }" interface=lxc3cecdfb29ced k8sPodName=openstack/nova-bootstrap-tzn9t labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=0b67053a74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-bootstrap-tzn9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b67053a74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=69f13057-cb4e-46aa-8308-eff973f370a8,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=69f13057-cb4e-46aa-8308-eff973f370a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-bootstrap-tzn9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 a455841b-91f5-48ee-ad20-8e47a0248811 default }" containerID=f6ef0cdc8ac08aaf11ef34344f5fa7b9ef54155e28416013132f77ef78c622d5 datapathConfiguration="&{false false false false false }" interface=lxc76ea1cd3cea7 k8sPodName=openstack/nova-db-init-545r5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6ef0cdc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6ef0cdc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7481c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=21883 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7481c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=21883 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=69f13057-cb4e-46aa-8308-eff973f370a8;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=69f13057-cb4e-46aa-8308-eff973f370a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=0b67053a74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=59828 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=69f13057-cb4e-46aa-8308-eff973f370a8,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=69f13057-cb4e-46aa-8308-eff973f370a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-bootstrap-tzn9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b67053a74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=59828 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-bootstrap-tzn9t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6ef0cdc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6ef0cdc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=12121 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6ef0cdc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=12121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 3229961e-4d00-4af3-9a5a-e67ac3114774 default }" containerID=610cc6b14f1967693d33f4da5f4b3ceb62058b792f2bac4e5f497c81a8f2f943 datapathConfiguration="&{false false false false false }" interface=lxc6e656d10f6ea k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=610cc6b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=610cc6b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=c7481c1e76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=16 identity=21883 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7481c1e76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=16 identity=21883 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/nova-api-metadata-f7cc6cb5-wqb2d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0b67053a74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=466 identity=59828 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-bootstrap-tzn9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b67053a74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=59828 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/nova-bootstrap-tzn9t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b006350434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=939 identity=17494 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b006350434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=939 identity=17494 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-api-osapi-78b8b696d6-r4jb6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=45d25e6d2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=31959 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/nova-cell-setup-7cfmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=45d25e6d2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=31959 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/nova-cell-setup-7cfmm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=45fe918820 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2392 identity=27142 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=45fe918820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2392 identity=27142 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/nova-scheduler-797f9cd6bb-pcxwg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f06758d10f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1875 identity=1063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f06758d10f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1875 identity=1063 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/nova-conductor-5478cb4d6-vcn25 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6ef0cdc8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=468 identity=12121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6ef0cdc8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=12121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=610cc6b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=610cc6b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=2114 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=610cc6b14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1691 identity=2114 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=610cc6b14f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1691 identity=2114 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=610cc6b14f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1691 identity=2114 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/nova-novncproxy-65f89874cf-6zzqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6ef0cdc8a endpointID=468 k8sNamespace=openstack k8sPodName=nova-db-init-545r5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=744c22e3-bdf5-4b63-b12c-6c6689777870 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=f6ef0cdc8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=12121 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/nova-db-init-545r5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 8e23c747-8b93-4545-b2a8-a51008957f10 default }" containerID=8975d96852d8d5e4c667b6144e60695e12877aae94f1c4dfc40137905b722063 datapathConfiguration="&{false false false false false }" interface=lxce7d8eda2ef7b k8sPodName=openstack/nova-db-sync-pdfq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8975d96852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8975d96852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8975d96852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identity=43380 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8975d96852 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2740 identity=43380 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8975d96852 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2740 identity=43380 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8975d96852 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2740 identity=43380 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 subsys=daemon level=info msg="Delete endpoint request" containerID=8975d96852 endpointID=2740 k8sNamespace=openstack k8sPodName=nova-db-sync-pdfq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=ba614908-57bc-4730-b7c4-0cb6a3332043 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8975d96852 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2740 identity=43380 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/nova-db-sync-pdfq5 subsys=endpoint