level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.048694ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.012µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.081475ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.58µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.332783ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.1µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="38.232µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="87.493µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="103.513µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="109.824µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="528.477µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.69µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.930559ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.880291ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="53.511µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="50.112µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="236.707µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="158.415µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.543µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=53.139179ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="188.336µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="8.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.144.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.905971ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.083964ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.872154ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="17.001µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.041µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="41.541µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="253.448µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.55µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="156.035µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="683.832µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="953.03µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="8.101µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="14.98µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.144 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.144 ipAddr.ipv6="" k8sNodeIP=199.204.45.144 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.144" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.63" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.144" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.144} {CiliumInternalIP 10.0.0.63}] 10.0.0.0/24 [] [] 10.0.0.179 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44713" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.475659859s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="14.901µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="40.542µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="53.571µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.1µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.760136632s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.224 714ddcd9-79a6-429a-81a4-33c2da1a46ef default }" containerID=c606501ee254804d346feb4b8120d85a404c9354d0a7c514fdac59b845e31afb datapathConfiguration="&{false false false false false }" interface=lxcf2891a1989d7 k8sPodName=kube-system/coredns-7c96b6546b-pwrvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c606501ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c606501ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c606501ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=63942 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c606501ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=63942 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 764b7a03-2858-4550-9292-39f80be02eb4 default }" containerID=bd4069b4c6ab4e4ece3578f81694b6e016761fc039abb1dff44842448a933676 datapathConfiguration="&{false false false false false }" interface=lxc4518f8d4b92c k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd4069b4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd4069b4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd4069b4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=30536 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd4069b4c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=333 identity=30536 ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=324.237908ms file-path=/var/run/cilium/state/templates/022f52e8e566c25aa611a584a4a5a6aa41f2db95273417b3ea8806df1ce20c79/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1201 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=4 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.092665365s file-path=/var/run/cilium/state/templates/736c07d03985b6ef58f603af8e9e681aeeccd9114ded9c43d5704f8a075d9808/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=c606501ee2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=521 identity=63942 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c606501ee2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=521 identity=63942 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=921 identity=4 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd4069b4c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=333 identity=30536 ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd4069b4c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=333 identity=30536 ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd4069b4c6 endpointID=333 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-x5724 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=aff821eb-7cba-434a-a3e0-1710b07088ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=bd4069b4c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=333 identity=30536 ipv4=10.0.0.171 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x5724 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 60f58489-0fae-4644-a86f-7e5b7f8040fa default }" containerID=cf90dfbeebac1e1b5da63f9cefa5fe7f9f69218db875b9e0558bf3d4b6225280 datapathConfiguration="&{false false false false false }" interface=lxc3a350b79bc7b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf90dfbeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3167 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf90dfbeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3167 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf90dfbeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3167 identity=13912 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf90dfbeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3167 identity=13912 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cf90dfbeeb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3167 identity=13912 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf90dfbeeb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3167 identity=13912 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hfrd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1201 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01201 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01201 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01201 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01201:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1201 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 a2006a0d-7541-42dd-8cf1-397109cea209 default }" containerID=6b6025ebadec17cf1b83ea7bb04e0972bbebcc1fd4059c76ed8ea1d5a2a353d2 datapathConfiguration="&{false false false false false }" interface=lxc1ef8175aea63 k8sPodName=kube-system/coredns-67659f764b-q5rzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b6025ebad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-q5rzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b6025ebad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-q5rzn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6b6025ebad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=63942 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-q5rzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b6025ebad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=63942 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-q5rzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 5204b07d-790a-40b7-8651-e45391cd49e0 default }" containerID=a4c84cb03ff6b4558916ffe544cc0fa992ebe669a4ed4de1f78b7fe6c46a59c7 datapathConfiguration="&{false false false false false }" interface=lxc900274fc5966 k8sPodName=kube-system/coredns-67659f764b-j6786 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4c84cb03f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 ipv4=10.0.0.78 ipv6= k8sPodName=kube-system/coredns-67659f764b-j6786 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4c84cb03f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.78 ipv6= k8sPodName=kube-system/coredns-67659f764b-j6786 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a4c84cb03f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=63942 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.78 ipv6= k8sPodName=kube-system/coredns-67659f764b-j6786 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4c84cb03f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=63942 ipv4=10.0.0.78 ipv6= k8sPodName=kube-system/coredns-67659f764b-j6786 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4c84cb03f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=798 identity=63942 ipv4=10.0.0.78 ipv6= k8sPodName=kube-system/coredns-67659f764b-j6786 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4c84cb03f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=798 identity=63942 ipv4=10.0.0.78 ipv6= k8sPodName=kube-system/coredns-67659f764b-j6786 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b6025ebad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=309 identity=63942 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-q5rzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b6025ebad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=63942 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-q5rzn subsys=daemon level=info msg="Delete endpoint request" containerID=c606501ee2 endpointID=521 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-pwrvr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c606501ee2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=521 identity=63942 ipv4=10.0.0.224 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-pwrvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 eb623146-1f39-4880-80fc-68e41e51c857 default }" containerID=3df12b17b38befca2c11118bb790e87d42c400257c7309495f5fc20dfebf784a datapathConfiguration="&{false false false false false }" interface=lxc5fd3c5f91d81 k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3df12b17b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3df12b17b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3df12b17b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identity=54478 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3df12b17b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3344 identity=54478 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3df12b17b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3344 identity=54478 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=3df12b17b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3344 identity=54478 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-l7qfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 8d274936-7da4-4ec2-a172-cfe2ee1e1d3c default }" containerID=ab13298bb8fc3f4d8b538f8f255bb957abfb721cdf886ac95282a878507fc71e datapathConfiguration="&{false false false false false }" interface=lxcb1ce1c5489ec k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab13298bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab13298bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.42 dffdb4df-4d59-4b94-8971-2db64f825639 default }" containerID=050be028d1b8060bce1f81b443b5e5dbd9e4aaabdabba89c27a36851dd340286 datapathConfiguration="&{false false false false false }" interface=lxc9f2da3f3b5a6 k8sPodName=cert-manager/cert-manager-79c48d47db-8599w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=050be028d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=050be028d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab13298bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=16643 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab13298bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=16643 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=050be028d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=050be028d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identity=4203 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=050be028d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1704 identity=4203 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab13298bb8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3319 identity=16643 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab13298bb8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3319 identity=16643 ipv4=10.0.0.97 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-mhvfx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=050be028d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1704 identity=4203 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w subsys=endpoint level=info msg="Successful endpoint creation" containerID=050be028d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1704 identity=4203 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-8599w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 1a631bf0-52c2-4399-8d1a-3c371cd32992 default }" containerID=1dbfa178b5c2de7d200c3d1d1c23d942fe172fd07cd49c25e653ded16f5ae942 datapathConfiguration="&{false false false false false }" interface=lxc14ed0fab2b95 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dbfa178b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dbfa178b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dbfa178b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identity=2513 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dbfa178b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2496 identity=2513 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dbfa178b5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2496 identity=2513 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dbfa178b5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2496 identity=2513 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-rqqht subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.89 7e0b89e2-ab50-41ae-b21b-46e1ce8b3773 default }" containerID=4068233febb3e201d765adb16b3e5b2045dac73d8db2fd1e6ac39df2b5578d1e datapathConfiguration="&{false false false false false }" interface=lxceed1f278a8b1 k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4068233feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4068233feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4068233feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identity=9213 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4068233feb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2076 identity=9213 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4068233feb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2076 identity=9213 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4068233feb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2076 identity=9213 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4068233feb endpointID=2076 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7hlbw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f67a33b1-f129-4faa-ace9-c16214e9383a k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4068233feb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2076 identity=9213 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7hlbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 72ca006c-e6d3-46aa-a0e2-e561369d1b54 default }" containerID=903d12147b791e24fbfb6d60212497c7195efd1c671c7fb9b75aedbde1b556e8 datapathConfiguration="&{false false false false false }" interface=lxc35718b34ce41 k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=903d12147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=903d12147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=290da919-6b99-4bc7-9ac8-30971710805a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=290da919-6b99-4bc7-9ac8-30971710805a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=903d12147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=290da919-6b99-4bc7-9ac8-30971710805a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=290da919-6b99-4bc7-9ac8-30971710805a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=903d12147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=4350 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=290da919-6b99-4bc7-9ac8-30971710805a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=290da919-6b99-4bc7-9ac8-30971710805a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=903d12147b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=4350 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=903d12147b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=6 identity=4350 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=903d12147b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=4350 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=903d12147b endpointID=6 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9fvrk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=290da919-6b99-4bc7-9ac8-30971710805a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=290da919-6b99-4bc7-9ac8-30971710805a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=903d12147b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=4350 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9fvrk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 630bc35c-02f3-4645-9cd0-60e5d1312c1d default }" containerID=836196d40dfd1f0cfb6b394cc6932048e244d078898767253fdf44645c086aa9 datapathConfiguration="&{false false false false false }" interface=lxc5f3aed46c8c2 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=836196d40d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=836196d40d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=836196d40d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identity=841 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=836196d40d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1907 identity=841 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=836196d40d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1907 identity=841 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=836196d40d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1907 identity=841 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sw8p9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 7ca0d978-9b3b-4dce-be39-2d9040637688 default }" containerID=2db4d509c1b4471522f11e800047c15bd530228f032c42b3a932ae499c457bd2 datapathConfiguration="&{false false false false false }" interface=lxc09b52af00ead k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2db4d509c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2db4d509c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c1323e9d-3880-4210-abb1-d809ff674173,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c1323e9d-3880-4210-abb1-d809ff674173,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c1323e9d-3880-4210-abb1-d809ff674173;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c1323e9d-3880-4210-abb1-d809ff674173;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2db4d509c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=1401 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c1323e9d-3880-4210-abb1-d809ff674173,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c1323e9d-3880-4210-abb1-d809ff674173,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2db4d509c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1000 identity=1401 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2db4d509c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1000 identity=1401 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2db4d509c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1000 identity=1401 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2db4d509c1 endpointID=1000 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bdtx7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c1323e9d-3880-4210-abb1-d809ff674173 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c1323e9d-3880-4210-abb1-d809ff674173 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2db4d509c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1000 identity=1401 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bdtx7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d2b8a179-ec24-4296-be0d-25cf13cf16fa] Description:}]" policyAddRequest=054ba01b-71fb-4ce0-9e55-14dfe56fb253 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=054ba01b-71fb-4ce0-9e55-14dfe56fb253 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=92cece55-8f04-42d1-b8e4-fb96fb82cc68] Description:}]" policyAddRequest=1cbefbf1-d00a-40e9-93ff-49b30176abc0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1cbefbf1-d00a-40e9-93ff-49b30176abc0 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.124 3b246310-b9f1-4276-84a2-d5f9893c003b default }" containerID=ef8dbf9e2f4d500abecf8ad1be3b757dff1ee246d10cf21f14fa0b54659688c5 datapathConfiguration="&{false false false false false }" interface=lxcc9367b7e60b2 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef8dbf9e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef8dbf9e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef8dbf9e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=27215 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef8dbf9e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=27215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef8dbf9e2f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=636 identity=27215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef8dbf9e2f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=636 identity=27215 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvg7r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 f4124127-f4f4-48ca-8144-fac09540cb70 default }" containerID=287d80102430865eb2d67b1de05a83b9acd7b06271607dd169bd33bbfc3980fd datapathConfiguration="&{false false false false false }" interface=lxccf3d8940340b k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=287d801024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=287d801024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=287d801024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 identity=30356 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=287d801024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2601 identity=30356 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=287d801024 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2601 identity=30356 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=287d801024 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2601 identity=30356 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2wvv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 186d22be-0ba0-40f7-9dfb-88e4966639ad default }" containerID=64adcad6dac6a1e64a24db2bc72d70039c498fc859bb77e42309c8760c06f9ae datapathConfiguration="&{false false false false false }" interface=lxc14d2c6e957f8 k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64adcad6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64adcad6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64adcad6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=18772 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=64adcad6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=18772 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64adcad6da datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=515 identity=18772 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=64adcad6da datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=515 identity=18772 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-2fbzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 d60f60b8-3704-4ca1-8423-0bbff3746b2a default }" containerID=a42cb5b979c7180f0914f92e55f94231e3ea1166f0a3f75d4999e51ec77b3652 datapathConfiguration="&{false false false false false }" interface=lxcdc260a94fb11 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a42cb5b979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a42cb5b979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a42cb5b979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=41733 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a42cb5b979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=41733 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a42cb5b979 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=105 identity=41733 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a42cb5b979 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=105 identity=41733 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 cc04016e-7d07-4efd-8f80-7cc515977bd2 default }" containerID=59a5c052fcd0c5b31322488d2926b5d6cc1c02a83e18a5786a53b6b32fa20401 datapathConfiguration="&{false false false false false }" interface=lxcb1c6d3e38327 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59a5c052fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59a5c052fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59a5c052fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=17650 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=59a5c052fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=17650 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59a5c052fc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3368 identity=17650 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59a5c052fc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3368 identity=17650 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.003976896127260676 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=33fa14fd-1d63-4b66-a548-224a276d622d] Description:}]" policyAddRequest=83523c9a-b162-4939-9f92-e97cfbe3c8d7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=83523c9a-b162-4939-9f92-e97cfbe3c8d7 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.165 3031e160-bcb7-4368-988a-f4713da35d4e default }" containerID=45d88e214c555c05f2850c853748070894bb60b41b077ac4ac34087075e798cd datapathConfiguration="&{false false false false false }" interface=lxc1d76438c2538 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45d88e214c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 ipv4=10.0.0.165 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45d88e214c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.165 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45d88e214c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=7957 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.165 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45d88e214c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=7957 ipv4=10.0.0.165 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=45d88e214c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=588 identity=7957 ipv4=10.0.0.165 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45d88e214c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=588 identity=7957 ipv4=10.0.0.165 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.031037374707481705 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.24 c3585ac1-1cb3-4b8b-ae87-6accd0005911 default }" containerID=69836c9ac5900f2443704830023ba2e0a3cc1d0bdf0bb4b491fffa73c4c0b718 datapathConfiguration="&{false false false false false }" interface=lxc17dafa772300 k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69836c9ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69836c9ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69836c9ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identity=31376 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=69836c9ac5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2052 identity=31376 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69836c9ac5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2052 identity=31376 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=69836c9ac5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2052 identity=31376 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-wzhqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 2e647d53-c7e0-4ec6-b7e0-5c8524652626 default }" containerID=f4af812096a33569c2528f21949bd08fdb900eb1de5469e22b0f6948cee005b6 datapathConfiguration="&{false false false false false }" interface=lxc5412625ad97d k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4af812096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4af812096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4af812096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=18388 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4af812096 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=18388 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4af812096 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=976 identity=18388 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4af812096 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=976 identity=18388 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 42f43b69-7dbd-4bdd-be53-c78c2b121a54 default }" containerID=e6c87ddb5524546dcb4cd90644d5f2558ddf5ce146f2bb84379d9187e0717608 datapathConfiguration="&{false false false false false }" interface=lxcd2f4b4b05196 k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6c87ddb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6c87ddb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6c87ddb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=20350 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e6c87ddb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=20350 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 a8d8123d-ed9a-46bf-af76-d920845e8722 default }" containerID=5d1401c38505616319854433db79cf95a856c7b3119ae3fc6b78e6b44f3a1774 datapathConfiguration="&{false false false false false }" interface=lxc9004ed3c1492 k8sPodName=openstack/keystone-credential-setup-ctl67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d1401c385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d1401c385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d1401c385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=15775 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d1401c385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=15775 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6c87ddb55 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2213 identity=20350 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6c87ddb55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2213 identity=20350 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-api-9d5c9f49f-5p99l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5d1401c385 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1466 identity=15775 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d1401c385 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1466 identity=15775 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d1401c385 endpointID=1466 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ctl67 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=64e83e62-b5fb-4456-b253-4378c2375b66 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5d1401c385 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1466 identity=15775 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-credential-setup-ctl67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 3aaa21ff-f459-4382-8170-a0324a928e6b default }" containerID=670e452417ed2541e20f9eeec6bcd859c5eb3c83fb6f76b794e7e1bfdb69bce3 datapathConfiguration="&{false false false false false }" interface=lxc93d311aa8bd2 k8sPodName=openstack/keystone-db-init-vsjdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=670e452417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=670e452417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81ec063e-4513-47bd-9023-cf488ed57348,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=81ec063e-4513-47bd-9023-cf488ed57348,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=670e452417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=81ec063e-4513-47bd-9023-cf488ed57348;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=81ec063e-4513-47bd-9023-cf488ed57348;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=670e452417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=5031 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81ec063e-4513-47bd-9023-cf488ed57348,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=81ec063e-4513-47bd-9023-cf488ed57348,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=670e452417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=5031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=670e452417 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1466 identity=5031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=670e452417 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1466 identity=5031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=670e452417 endpointID=1466 k8sNamespace=openstack k8sPodName=keystone-db-init-vsjdc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=81ec063e-4513-47bd-9023-cf488ed57348 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=81ec063e-4513-47bd-9023-cf488ed57348 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=670e452417 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1466 identity=5031 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-vsjdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 34f2180f-9907-41ea-b328-454f2b6c53fa default }" containerID=1c45df90cc666f2ea51e5498ce5ba5fbe022588360278bef1247e78bde0dc273 datapathConfiguration="&{false false false false false }" interface=lxc51bd22b2ddd4 k8sPodName=openstack/keystone-fernet-setup-hgqxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c45df90cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c45df90cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c45df90cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=26647 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c45df90cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=26647 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c45df90cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2174 identity=26647 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c45df90cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2174 identity=26647 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh subsys=daemon level=info msg="Delete endpoint request" containerID=1c45df90cc endpointID=2174 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-hgqxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4c83e7d0-f2d1-4e0f-916e-698425c4e2a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1c45df90cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2174 identity=26647 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-hgqxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 79670335-622e-4203-8080-0b2801014e78 default }" containerID=31e39a1b2c2c465cfea58a63df33933cef6eab5522f6468e84f897dd617ec44d datapathConfiguration="&{false false false false false }" interface=lxc76c52d98632c k8sPodName=openstack/keystone-db-sync-cgxn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e39a1b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e39a1b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31e39a1b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=43881 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e39a1b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=43881 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=31e39a1b2c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2916 identity=43881 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e39a1b2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2916 identity=43881 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 subsys=daemon level=info msg="Delete endpoint request" containerID=31e39a1b2c endpointID=2916 k8sNamespace=openstack k8sPodName=keystone-db-sync-cgxn2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=80fbf10a-bc3e-4b46-940a-b51ebc1efa8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=31e39a1b2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2916 identity=43881 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-cgxn2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 82f4f690-383e-4b84-b3a6-dd4a1e6e17e2 default }" containerID=61e6259daa3f272d82e8b23f146f17c15f5240bc45d896ca8fc3c6c3a8483547 datapathConfiguration="&{false false false false false }" interface=lxccc3cdc311cd7 k8sPodName=openstack/keystone-rabbit-init-jhjz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61e6259daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61e6259daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61e6259daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=55387 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61e6259daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=55387 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61e6259daa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=128 identity=55387 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61e6259daa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=128 identity=55387 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61e6259daa endpointID=128 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-jhjz4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1174d89f-124d-40c1-9c02-9681be0c5821 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=61e6259daa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=128 identity=55387 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-rabbit-init-jhjz4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 7c8a9263-3ca1-47bd-bf9b-916c2f7ac097 default }" containerID=a2d4a27f742832d58859139aed51430618a5ea9d4e446a47c0ec0ce5a840b632 datapathConfiguration="&{false false false false false }" interface=lxc16140ce08e80 k8sPodName=openstack/keystone-domain-manage-scbzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2d4a27f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2d4a27f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a2d4a27f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2d4a27f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=27046 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2d4a27f74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=27046 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2d4a27f74 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=97 identity=27046 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2d4a27f74 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=97 identity=27046 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2d4a27f74 endpointID=97 k8sNamespace=openstack k8sPodName=keystone-domain-manage-scbzh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=e113c908-c92a-421c-91f8-83fcd4b6e5a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a2d4a27f74 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=97 identity=27046 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-domain-manage-scbzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 b2873f2a-d9a1-4faa-831c-04b355e37200 default }" containerID=c6a4dc8716064aa48235afc093fcdce85cedb88c19cc195fb269af5cbc77c766 datapathConfiguration="&{false false false false false }" interface=lxc5c08eeb85f76 k8sPodName=openstack/keystone-bootstrap-798fr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6a4dc8716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6a4dc8716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6a4dc8716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identity=33470 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c6a4dc8716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identity=33470 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6a4dc8716 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3066 identity=33470 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6a4dc8716 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3066 identity=33470 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6a4dc8716 endpointID=3066 k8sNamespace=openstack k8sPodName=keystone-bootstrap-798fr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=610be5d5-2aa3-4837-9278-071b8de751e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c6a4dc8716 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3066 identity=33470 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-bootstrap-798fr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 25e22c75-1f8d-4c0d-923f-1692e709174d default }" containerID=130bfd9d4f788c840e7e1b01becc6132d2377e111db147e74decaaa4d1341d5d datapathConfiguration="&{false false false false false }" interface=lxc861597d64aee k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=130bfd9d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=130bfd9d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=130bfd9d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=40105 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=130bfd9d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=40105 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=130bfd9d4f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2135 identity=40105 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=130bfd9d4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2135 identity=40105 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 42b56776-f6e2-4690-a204-81ac8afb40cd default }" containerID=8297dad7b4e97414adb09feae2f2aa2e4074bc2ce406b7fff93ccd3664c69fc3 datapathConfiguration="&{false false false false false }" interface=lxcf52adc32972b k8sPodName=openstack/barbican-api-5b44b895c8-74c74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8297dad7b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8297dad7b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8297dad7b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8297dad7b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=20329 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8297dad7b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=20329 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 bf348c71-f85e-4715-a00f-17749e142cfd default }" containerID=85aad0de62fe54d793185e2376b08311fa2262a515c9f0142f60006aede9b7ab datapathConfiguration="&{false false false false false }" interface=lxc8506364716ee k8sPodName=openstack/barbican-db-init-vl7qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85aad0de62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85aad0de62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85aad0de62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=27659 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85aad0de62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=27659 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8297dad7b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1232 identity=20329 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8297dad7b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1232 identity=20329 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-5b44b895c8-74c74 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=85aad0de62 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=419 identity=27659 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=85aad0de62 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=419 identity=27659 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85aad0de62 endpointID=419 k8sNamespace=openstack k8sPodName=barbican-db-init-vl7qc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=24aefb4a-ae44-4999-b91d-5a65e0f14727 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=85aad0de62 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=419 identity=27659 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-db-init-vl7qc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 3483ac65-6122-43f5-8a54-4a97f01278be default }" containerID=9508c78f52d0dc8da824d50a952ff7bad97b0449d44dac51bf5e30156a0f1710 datapathConfiguration="&{false false false false false }" interface=lxc6670bd87ab36 k8sPodName=openstack/barbican-db-sync-4m57d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9508c78f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9508c78f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9508c78f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=27396 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9508c78f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=27396 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9508c78f52 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=662 identity=27396 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d subsys=endpoint level=info msg="Successful endpoint creation" containerID=9508c78f52 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=662 identity=27396 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d subsys=daemon level=info msg="Delete endpoint request" containerID=9508c78f52 endpointID=662 k8sNamespace=openstack k8sPodName=barbican-db-sync-4m57d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=687854ef-f9bc-4594-9379-25dcdd84986c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9508c78f52 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=662 identity=27396 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/barbican-db-sync-4m57d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 9fdc4b16-2584-4e97-ba4a-8718ed0fd717 default }" containerID=b7caa694f4d05c09428ae3588f11ad4feb7cc31211ddf5cbd173e8fe0d7f3212 datapathConfiguration="&{false false false false false }" interface=lxc400cfdc8cf8c k8sPodName=openstack/barbican-rabbit-init-f9lnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7caa694f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7caa694f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b7caa694f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7caa694f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=56919 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7caa694f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2565 identity=56919 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7caa694f4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2565 identity=56919 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7caa694f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2565 identity=56919 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7caa694f4 endpointID=2565 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-f9lnt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3cf6256b-b9c6-481c-a1cf-fa7aea769be8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b7caa694f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2565 identity=56919 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-f9lnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 64550cbc-81a7-427f-9300-7286da84bf54 default }" containerID=01a6a1b8fff0e3fd68a65eb5cfe9634f2122775adb23148b19cdfd9482632f95 datapathConfiguration="&{false false false false false }" interface=lxca7b2a3c8c41d k8sPodName=openstack/barbican-ks-service-cjbfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01a6a1b8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01a6a1b8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01a6a1b8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=18366 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01a6a1b8ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=18366 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=01a6a1b8ff datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3797 identity=18366 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=01a6a1b8ff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3797 identity=18366 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01a6a1b8ff endpointID=3797 k8sNamespace=openstack k8sPodName=barbican-ks-service-cjbfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=c068d900-e62a-487a-b0f6-74c4c7ea0bf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=01a6a1b8ff datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3797 identity=18366 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-ks-service-cjbfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 1d3732b5-0e4a-48c6-8ae4-46cb4a918a1a default }" containerID=e51241cf1ab9d4435055118e4a677af539c72b054e9719862102b7ccc37d7ef9 datapathConfiguration="&{false false false false false }" interface=lxc5760bf99725b k8sPodName=openstack/barbican-ks-endpoints-jb2v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e51241cf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e51241cf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e51241cf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e51241cf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identity=54758 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e51241cf1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identity=54758 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e51241cf1a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1934 identity=54758 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e51241cf1a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1934 identity=54758 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e51241cf1a endpointID=1934 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-jb2v8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eb076dfa-b864-41e6-88cb-284c16af3124 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e51241cf1a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1934 identity=54758 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jb2v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 af4dc1dd-2091-43c9-a382-bb10ef5f2900 default }" containerID=957c9a630f3bd0a8b2442ae5c705379742f3227ac528a90c33c877edd5d2ed78 datapathConfiguration="&{false false false false false }" interface=lxcc3b56d26310f k8sPodName=openstack/barbican-ks-user-wf58f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=957c9a630f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=957c9a630f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=957c9a630f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=957c9a630f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=3847 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=957c9a630f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=3847 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=957c9a630f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=228 identity=3847 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f subsys=endpoint level=info msg="Successful endpoint creation" containerID=957c9a630f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=228 identity=3847 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=957c9a630f endpointID=228 k8sNamespace=openstack k8sPodName=barbican-ks-user-wf58f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a188a7b0-373d-4dcc-b494-b668a9211d1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=957c9a630f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=228 identity=3847 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-ks-user-wf58f subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.221 6a9bb34c-8324-4cf5-a5ee-aff9fe908d8a default }" containerID=b7918282c0dba17b58e1a9e187e05f1b2bba0c4c4c063f4f74bea55ac6f4d37d datapathConfiguration="&{false false false false false }" interface=lxcfbe870c444d4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7918282c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7918282c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b7918282c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7918282c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=26970 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7918282c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=26970 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7918282c0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2826 identity=26970 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7918282c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2826 identity=26970 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 8863fa42-8240-4802-aa97-ac3f7beb7e75 default }" containerID=1f2d89c7ce46ab2f35d8a60cc736a6f1bf238d7df7024f258959fa63af4767f1 datapathConfiguration="&{false false false false false }" interface=lxcab50e9be77d0 k8sPodName=openstack/glance-db-init-qkzz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f2d89c7ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f2d89c7ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1f2d89c7ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=13653 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f2d89c7ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=864 identity=13653 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f2d89c7ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=864 identity=13653 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f2d89c7ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=864 identity=13653 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f2d89c7ce endpointID=864 k8sNamespace=openstack k8sPodName=glance-db-init-qkzz7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=fe174385-b983-4eaf-9058-3eb72a746e8a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1f2d89c7ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=864 identity=13653 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-init-qkzz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 d8c97fcb-b44b-4f9c-afba-6e600e5e4d47 default }" containerID=a9928113831b9830693fa82b28e9e05fc42762daec4dd5e6446b97d18af40634 datapathConfiguration="&{false false false false false }" interface=lxc5a6cba9e30c6 k8sPodName=openstack/glance-db-sync-4666q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a992811383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a992811383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a992811383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=15218 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a992811383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=15218 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a992811383 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2251 identity=15218 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q subsys=endpoint level=info msg="Successful endpoint creation" containerID=a992811383 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2251 identity=15218 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a992811383 endpointID=2251 k8sNamespace=openstack k8sPodName=glance-db-sync-4666q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=60b5a5c9-6b63-480e-a514-f4efd74da7f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a992811383 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2251 identity=15218 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-db-sync-4666q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 d83b222a-41aa-4118-8dc7-8c96a9a638ca default }" containerID=f7f3238d7225dfd8ada915e639c4af978db9f4b80cb7e82b90f61cce9f6c38c6 datapathConfiguration="&{false false false false false }" interface=lxca810e1fd272b k8sPodName=openstack/glance-rabbit-init-5v5nx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f3238d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f3238d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f7f3238d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identity=1817 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f3238d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identity=1817 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f3238d72 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2354 identity=1817 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f3238d72 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2354 identity=1817 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7f3238d72 endpointID=2354 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5v5nx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8d2c5fff-36c0-4854-8164-20472d9b5b1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f7f3238d72 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2354 identity=1817 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-rabbit-init-5v5nx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 984a19a8-2f81-4d73-9ed9-7db7a123dd33 default }" containerID=7f80452e3292461aa688812fc258ae0bba44ca58a1c8a682d00a724588bdfccf datapathConfiguration="&{false false false false false }" interface=lxcc1e52b64f01d k8sPodName=openstack/glance-ks-service-msgcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f80452e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f80452e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f80452e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=60713 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7f80452e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=60713 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f80452e32 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=825 identity=60713 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f80452e32 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=825 identity=60713 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04829764497409607 newInterval=16m53s subsys=map-ct level=info msg="Delete endpoint request" containerID=7f80452e32 endpointID=825 k8sNamespace=openstack k8sPodName=glance-ks-service-msgcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=eff8999e-f070-4f20-a5e2-76428e58112b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7f80452e32 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=825 identity=60713 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-msgcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 b3b90e49-733a-4b4d-9021-c4b452db396c default }" containerID=ac0fcf7e016e52bbb400f7d64015fc21843a02c259a8090f53dc4a9e3fa6b5ea datapathConfiguration="&{false false false false false }" interface=lxc207481af54f2 k8sPodName=openstack/glance-ks-endpoints-xr779 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac0fcf7e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac0fcf7e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac0fcf7e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=28780 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac0fcf7e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=28780 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac0fcf7e01 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=150 identity=28780 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac0fcf7e01 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=150 identity=28780 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac0fcf7e01 endpointID=150 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xr779 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eaee682b-d494-45cc-8018-f7e9bc994612 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ac0fcf7e01 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=150 identity=28780 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-ks-endpoints-xr779 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 a8e386cc-0381-4d90-8583-28fe16664df5 default }" containerID=4650e8d3fa107997ad7414f2287d9094245d52fa4c58f508ce18cfc103370915 datapathConfiguration="&{false false false false false }" interface=lxcf0dac65de0d4 k8sPodName=openstack/glance-ks-user-tpv6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4650e8d3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4650e8d3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4650e8d3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4650e8d3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=960 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4650e8d3fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=960 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4650e8d3fa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3614 identity=960 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=4650e8d3fa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3614 identity=960 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4650e8d3fa endpointID=3614 k8sNamespace=openstack k8sPodName=glance-ks-user-tpv6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=7fe110ba-6b52-48bb-b3ba-7b30db89e657 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4650e8d3fa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3614 identity=960 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-tpv6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 b08013c2-89f4-4d59-9c3e-d6b9e213b33f default }" containerID=f6d3f01baecc4f5db8b6de445eb923aee1f1f616839e959fdbb50de16fca48fa datapathConfiguration="&{false false false false false }" interface=lxc5b6f992c07de k8sPodName=openstack/glance-metadefs-load-2v2r5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6d3f01bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6d3f01bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6d3f01bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6d3f01bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identity=5342 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6d3f01bae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2927 identity=5342 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6d3f01bae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2927 identity=5342 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6d3f01bae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2927 identity=5342 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6d3f01bae endpointID=2927 k8sNamespace=openstack k8sPodName=glance-metadefs-load-2v2r5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a6b8943f-1d7d-4ac3-afa2-fcf6b02f5533 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f6d3f01bae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2927 identity=5342 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-metadefs-load-2v2r5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 7d766144-96b7-4698-87ad-ac586cf403fd default }" containerID=85dc0b9954bdfb86c8ab0aced6995bb823b93221874cf9fddab1a1a0d139ccab datapathConfiguration="&{false false false false false }" interface=lxc0b57ac9a17b3 k8sPodName=openstack/glance-storage-init-9vrb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85dc0b9954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85dc0b9954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85dc0b9954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=40804 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85dc0b9954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=40804 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=85dc0b9954 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1197 identity=40804 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85dc0b9954 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1197 identity=40804 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 subsys=daemon level=info msg="Delete endpoint request" containerID=85dc0b9954 endpointID=1197 k8sNamespace=openstack k8sPodName=glance-storage-init-9vrb2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=80e2ed4f-29d3-4258-b593-76e226a4d8c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=85dc0b9954 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1197 identity=40804 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/glance-storage-init-9vrb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 1874658a-8ab7-47d6-9352-88ab566e54de default }" containerID=3e73429ec8c8a9d1ba1d22c1bdff6b5f696173b8b5bd74a645334becd0c6284c datapathConfiguration="&{false false false false false }" interface=lxc59d886e6df9f k8sPodName=openstack/glance-api-7bdbfb7674-2hndb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e73429ec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e73429ec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e73429ec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e73429ec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identity=23551 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e73429ec8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identity=23551 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e73429ec8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=965 identity=23551 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e73429ec8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=965 identity=23551 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-api-7bdbfb7674-2hndb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 3930ab46-26ae-4e88-b140-f5824474b350 default }" containerID=c0ee0aa4a1cb879af50b23b5a8e5ec21b05740c785cf8dbbf5daf9819f8959e1 datapathConfiguration="&{false false false false false }" interface=lxc5294e0332d45 k8sPodName=openstack/rabbitmq-cinder-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0ee0aa4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0ee0aa4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-cinder;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0ee0aa4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=16324 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-cinder,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cinder-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-cinder-server-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0ee0aa4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=16324 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0ee0aa4a1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=612 identity=16324 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0ee0aa4a1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=612 identity=16324 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rabbitmq-cinder-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 afec1042-3cbe-471c-bda0-07475b0d8e80 default }" containerID=1d9bc3be0380b1f6942ea97eea851f4849d7fbb5a8c2f0f3531c7e2979977cc9 datapathConfiguration="&{false false false false false }" interface=lxcd0d726c80bc4 k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d9bc3be03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d9bc3be03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d9bc3be03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=25204 identityLabels="k8s:application=cinder,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d9bc3be03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=25204 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 eb89afa1-8b6f-41e8-90c0-3ad1566246a5 default }" containerID=0cc455133142e7199e3333c9fad0ac39e0b3f87a4a66a4b867b70f1ebf1c7bfb datapathConfiguration="&{false false false false false }" interface=lxc1e09d8257410 k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cc4551331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cc4551331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cc4551331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=10060 identityLabels="k8s:application=cinder,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cc4551331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=10060 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d9bc3be03 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=228 identity=25204 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d9bc3be03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=228 identity=25204 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/cinder-scheduler-748f9f4d4c-rrcw6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 94077a16-42b1-43ef-9842-046918c432d3 default }" containerID=41eaa4121c747c14ed44b1ec894be5c3b3f39fc7d40d9191a393e0cd3c0293f8 datapathConfiguration="&{false false false false false }" interface=lxca4ed17226206 k8sPodName=openstack/cinder-db-init-lxhcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41eaa4121c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41eaa4121c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5216a65b-fae3-4224-a930-42e55f158249,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=5216a65b-fae3-4224-a930-42e55f158249,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=5216a65b-fae3-4224-a930-42e55f158249;k8s:batch.kubernetes.io/job-name=cinder-db-init;k8s:component=db-init;k8s:controller-uid=5216a65b-fae3-4224-a930-42e55f158249;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41eaa4121c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identity=10670 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=5216a65b-fae3-4224-a930-42e55f158249,k8s:batch.kubernetes.io/job-name=cinder-db-init,k8s:component=db-init,k8s:controller-uid=5216a65b-fae3-4224-a930-42e55f158249,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-init,k8s:release_group=cinder" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41eaa4121c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3175 identity=10670 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cc4551331 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3418 identity=10060 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cc4551331 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3418 identity=10060 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/cinder-api-6dd7dc5bd9-x6hhj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=41eaa4121c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3175 identity=10670 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=41eaa4121c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3175 identity=10670 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41eaa4121c endpointID=3175 k8sNamespace=openstack k8sPodName=cinder-db-init-lxhcd subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=5216a65b-fae3-4224-a930-42e55f158249 k8s:batch.kubernetes.io/job-name=cinder-db-init k8s:component=db-init k8s:controller-uid=5216a65b-fae3-4224-a930-42e55f158249 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=41eaa4121c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3175 identity=10670 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/cinder-db-init-lxhcd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 1be14ce8-67e7-48e5-b020-f2f024d4b20b default }" containerID=16168eb68d7220ebd4d6c85d35ec92e2bd211311e9e0b950c0f2c41d2685d8f0 datapathConfiguration="&{false false false false false }" interface=lxce43cd4c0ae2d k8sPodName=openstack/cinder-db-sync-f2l4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16168eb68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16168eb68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=16168eb68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80;k8s:batch.kubernetes.io/job-name=cinder-db-sync;k8s:component=db-sync;k8s:controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-db-sync;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16168eb68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=12329 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80,k8s:batch.kubernetes.io/job-name=cinder-db-sync,k8s:component=db-sync,k8s:controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-db-sync,k8s:release_group=cinder" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16168eb68d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=12329 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16168eb68d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=503 identity=12329 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=16168eb68d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=503 identity=12329 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16168eb68d endpointID=503 k8sNamespace=openstack k8sPodName=cinder-db-sync-f2l4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80 k8s:batch.kubernetes.io/job-name=cinder-db-sync k8s:component=db-sync k8s:controller-uid=373f5543-a7aa-4fef-8658-45509c3cfe80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-db-sync k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=16168eb68d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=503 identity=12329 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/cinder-db-sync-f2l4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 5be19c03-23e9-4856-adca-17900562c593 default }" containerID=ee892b86b919be7e9475325c10d7576d1c1694c8ffce267a93dbe2dd08b8a775 datapathConfiguration="&{false false false false false }" interface=lxc232891cd3f04 k8sPodName=openstack/cinder-rabbit-init-gg9sw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee892b86b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee892b86b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=725a2ab5-00ed-49bc-923f-920807d85275,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=725a2ab5-00ed-49bc-923f-920807d85275,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=725a2ab5-00ed-49bc-923f-920807d85275;k8s:batch.kubernetes.io/job-name=cinder-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=725a2ab5-00ed-49bc-923f-920807d85275;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-rabbit-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee892b86b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=46539 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=725a2ab5-00ed-49bc-923f-920807d85275,k8s:batch.kubernetes.io/job-name=cinder-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=725a2ab5-00ed-49bc-923f-920807d85275,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-rabbit-init,k8s:release_group=cinder" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ee892b86b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=46539 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee892b86b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3606 identity=46539 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee892b86b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3606 identity=46539 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw subsys=daemon level=info msg="Delete endpoint request" containerID=ee892b86b9 endpointID=3606 k8sNamespace=openstack k8sPodName=cinder-rabbit-init-gg9sw subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=725a2ab5-00ed-49bc-923f-920807d85275 k8s:batch.kubernetes.io/job-name=cinder-rabbit-init k8s:component=rabbit-init k8s:controller-uid=725a2ab5-00ed-49bc-923f-920807d85275 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-rabbit-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=ee892b86b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3606 identity=46539 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/cinder-rabbit-init-gg9sw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 1b09d659-131e-490d-a7a7-47197d1c2773 default }" containerID=573257d0cdeadc55076e69c16560d99ac2ef91d30fb4ac1d3c187292f39951dd datapathConfiguration="&{false false false false false }" interface=lxc28d90e58b1ad k8sPodName=openstack/cinder-ks-service-47p97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=573257d0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=573257d0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5;k8s:batch.kubernetes.io/job-name=cinder-ks-service;k8s:component=ks-service;k8s:controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-service;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=573257d0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=64916 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5,k8s:batch.kubernetes.io/job-name=cinder-ks-service,k8s:component=ks-service,k8s:controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-service,k8s:release_group=cinder" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=573257d0cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=64916 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=573257d0cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=826 identity=64916 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=573257d0cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=826 identity=64916 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 subsys=daemon level=info msg="Delete endpoint request" containerID=573257d0cd endpointID=826 k8sNamespace=openstack k8sPodName=cinder-ks-service-47p97 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5 k8s:batch.kubernetes.io/job-name=cinder-ks-service k8s:component=ks-service k8s:controller-uid=f2798e7f-712d-4de0-8ac8-48f5a5541bc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-service k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=573257d0cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=826 identity=64916 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/cinder-ks-service-47p97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 ce5ce1f0-5f7c-47db-97a4-e18f1836d6dd default }" containerID=bd6720b3b9ae1a6a213f089606bc9a3188209555ee53dd199f288428358ab32a datapathConfiguration="&{false false false false false }" interface=lxcb8adf35752e9 k8sPodName=openstack/cinder-ks-endpoints-2m4tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd6720b3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd6720b3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2;k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-endpoints;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bd6720b3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=10193 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2,k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-endpoints,k8s:release_group=cinder" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd6720b3b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=10193 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd6720b3b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1470 identity=10193 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd6720b3b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1470 identity=10193 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd6720b3b9 endpointID=1470 k8sNamespace=openstack k8sPodName=cinder-ks-endpoints-2m4tg subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2 k8s:batch.kubernetes.io/job-name=cinder-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=873ba493-58b5-48b7-a23d-47ec232495d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-endpoints k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=bd6720b3b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1470 identity=10193 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/cinder-ks-endpoints-2m4tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 d60b7272-2474-4892-a157-4d5d5c8e51ce default }" containerID=207d3fe571227441439c277cd4f46661b8e6dcd8dc9b8a84e72d13649e4e2476 datapathConfiguration="&{false false false false false }" interface=lxccbf0921a6b15 k8sPodName=openstack/cinder-ks-user-t2vc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=207d3fe571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=207d3fe571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=207d3fe571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d;k8s:batch.kubernetes.io/job-name=cinder-ks-user;k8s:component=ks-user;k8s:controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-ks-user;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=207d3fe571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=7104 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d,k8s:batch.kubernetes.io/job-name=cinder-ks-user,k8s:component=ks-user,k8s:controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-ks-user,k8s:release_group=cinder" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=207d3fe571 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=7104 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=207d3fe571 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2936 identity=7104 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=207d3fe571 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=7104 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=207d3fe571 endpointID=2936 k8sNamespace=openstack k8sPodName=cinder-ks-user-t2vc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d k8s:batch.kubernetes.io/job-name=cinder-ks-user k8s:component=ks-user k8s:controller-uid=bce93b7a-65c9-44da-9a26-2f1b3090b71d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-ks-user k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=207d3fe571 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=7104 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/cinder-ks-user-t2vc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 9ca02687-fe8a-49e0-83f5-8fbb392c8df8 default }" containerID=52789d926b2248a3d6bb6103f4a3eebd144d595e8f698dae7fff5479244f936d datapathConfiguration="&{false false false false false }" interface=lxcab9ae29331bf k8sPodName=openstack/cinder-backup-storage-init-j76ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52789d926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52789d926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212;k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init;k8s:component=storage-init;k8s:controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-backup-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52789d926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=34357 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212,k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init,k8s:component=storage-init,k8s:controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-backup-storage-init,k8s:release_group=cinder" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52789d926b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=34357 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52789d926b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=42 identity=34357 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=52789d926b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=42 identity=34357 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52789d926b endpointID=42 k8sNamespace=openstack k8sPodName=cinder-backup-storage-init-j76ph subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212 k8s:batch.kubernetes.io/job-name=cinder-backup-storage-init k8s:component=storage-init k8s:controller-uid=1c65d79c-4b8e-4f51-bc0f-ac2bf7810212 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-backup-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=52789d926b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=42 identity=34357 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/cinder-backup-storage-init-j76ph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 f8a017d8-2b0d-4572-aed3-96732fe946b3 default }" containerID=abcbdfe37d76c5d492786903d5eb7a7020a6d86d37ad83fc1912253ffda92666 datapathConfiguration="&{false false false false false }" interface=lxc5fe591d7f33b k8sPodName=openstack/cinder-create-internal-tenant-qv9wn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abcbdfe37d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abcbdfe37d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23;k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant;k8s:component=create-internal-tenant;k8s:controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-create-internal-tenant;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=abcbdfe37d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=24157 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23,k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant,k8s:component=create-internal-tenant,k8s:controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-create-internal-tenant,k8s:release_group=cinder" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abcbdfe37d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=24157 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abcbdfe37d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=662 identity=24157 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn subsys=endpoint level=info msg="Successful endpoint creation" containerID=abcbdfe37d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=662 identity=24157 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abcbdfe37d endpointID=662 k8sNamespace=openstack k8sPodName=cinder-create-internal-tenant-qv9wn subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23 k8s:batch.kubernetes.io/job-name=cinder-create-internal-tenant k8s:component=create-internal-tenant k8s:controller-uid=1e0dd606-b149-4525-b3d0-844e51b1da23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-create-internal-tenant k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-create-internal-tenant k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=abcbdfe37d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=662 identity=24157 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/cinder-create-internal-tenant-qv9wn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 efc82815-41f2-4400-bd73-8fd73576c9ea default }" containerID=4b60f4776b768671fc851e56f5eac556c049ebf0ae55ffdff5f570a119dad135 datapathConfiguration="&{false false false false false }" interface=lxcde1c082d6664 k8sPodName=openstack/cinder-storage-init-td4f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b60f4776b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b60f4776b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4b60f4776b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f;k8s:batch.kubernetes.io/job-name=cinder-storage-init;k8s:component=storage-init;k8s:controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-storage-init;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b60f4776b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=64164 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f,k8s:batch.kubernetes.io/job-name=cinder-storage-init,k8s:component=storage-init,k8s:controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-storage-init,k8s:release_group=cinder" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b60f4776b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=64164 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b60f4776b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1909 identity=64164 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b60f4776b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1909 identity=64164 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b60f4776b endpointID=1909 k8sNamespace=openstack k8sPodName=cinder-storage-init-td4f4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f k8s:batch.kubernetes.io/job-name=cinder-storage-init k8s:component=storage-init k8s:controller-uid=c73e0e0d-3974-4f1f-a092-8d7d05458c4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-storage-init k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=4b60f4776b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1909 identity=64164 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/cinder-storage-init-td4f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 9e879a79-27fd-46e7-ab56-f76283b31717 default }" containerID=5679288a1b013859c4f2fd37291f2bf629a2734892229115d1277f11a3109908 datapathConfiguration="&{false false false false false }" interface=lxcd6aad78b1df1 k8sPodName=openstack/cinder-bootstrap-krwj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5679288a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5679288a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029;k8s:batch.kubernetes.io/job-name=cinder-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-bootstrap;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5679288a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=54800 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029,k8s:batch.kubernetes.io/job-name=cinder-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-bootstrap,k8s:release_group=cinder" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5679288a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=54800 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5679288a1b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=603 identity=54800 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5679288a1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=603 identity=54800 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 b7079632-6de4-40e9-8270-033ade31e91e default }" containerID=5e1757ec554a531fdf065d23f92aba809281ec6b95381f014905e50c99a407c0 datapathConfiguration="&{false false false false false }" interface=lxc0840b0cc7b9b k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e1757ec55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e1757ec55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=volume;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5e1757ec55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identity=9696 identityLabels="k8s:application=cinder,k8s:component=volume,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e1757ec55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identity=9696 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 3bb29d4b-cd3c-4d4c-ae6d-a2338564af66 default }" containerID=2f06349cb799742cd1d7edd00a85e83fa0361bfa0339e98334851fb2af6239c9 datapathConfiguration="&{false false false false false }" interface=lxc4197560fa83b k8sPodName=openstack/cinder-backup-5c58d57479-k4psw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f06349cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-5c58d57479-k4psw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f06349cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-5c58d57479-k4psw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:component=backup;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f06349cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=25217 identityLabels="k8s:application=cinder,k8s:component=backup,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-backup,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=cinder" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-5c58d57479-k4psw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f06349cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=25217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-5c58d57479-k4psw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e1757ec55 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2782 identity=9696 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e1757ec55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2782 identity=9696 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/cinder-volume-f48b7894f-4b6b9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2f06349cb7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=789 identity=25217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-5c58d57479-k4psw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f06349cb7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=25217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/cinder-backup-5c58d57479-k4psw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5679288a1b endpointID=603 k8sNamespace=openstack k8sPodName=cinder-bootstrap-krwj9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029 k8s:batch.kubernetes.io/job-name=cinder-bootstrap k8s:component=bootstrap k8s:controller-uid=6746e9d4-5d32-4486-bcb5-2bc19fc70029 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-bootstrap k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=5679288a1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=603 identity=54800 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/cinder-bootstrap-krwj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 4b690a74-310e-467d-b9cc-5e7d1d3297f6 default }" containerID=2ff1917bb82ae07f12af7c1361a4bd5bb4c958f84b0e7446c0b5562e418673af datapathConfiguration="&{false false false false false }" interface=lxc5550c212c5c9 k8sPodName=openstack/placement-api-674c79b99-6bw52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ff1917bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ff1917bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2ff1917bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2ff1917bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=34368 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ff1917bb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=34368 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 788954c0-97c6-4cc8-8443-aa9e08e414e9 default }" containerID=1eb819003ef3b79edf64060550926776550e3f044a192aeb4d0d1baf54d58d43 datapathConfiguration="&{false false false false false }" interface=lxc7fc1110daa5f k8sPodName=openstack/placement-db-init-grdvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1eb819003e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1eb819003e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1eb819003e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=19726 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1eb819003e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1192 identity=19726 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ff1917bb8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3347 identity=34368 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ff1917bb8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3347 identity=34368 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/placement-api-674c79b99-6bw52 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1eb819003e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1192 identity=19726 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1eb819003e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1192 identity=19726 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1eb819003e endpointID=1192 k8sNamespace=openstack k8sPodName=placement-db-init-grdvd subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888 k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=9d88a0c1-722b-419e-81e4-dd6e27187888 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=1eb819003e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1192 identity=19726 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/placement-db-init-grdvd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 6edc1a39-ad90-41d4-bf49-389b798328f2 default }" containerID=3ee8353a690681c863a95f90c4c67af49e6bddc631d4113f719f4a4c889299ed datapathConfiguration="&{false false false false false }" interface=lxc6d8c566b9749 k8sPodName=openstack/placement-db-sync-4r2mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ee8353a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ee8353a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ee8353a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identity=43677 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ee8353a69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3653 identity=43677 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ee8353a69 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3653 identity=43677 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ee8353a69 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3653 identity=43677 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ee8353a69 endpointID=3653 k8sNamespace=openstack k8sPodName=placement-db-sync-4r2mx subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=a4f3ae87-3c24-40c3-810e-3bfda95fc454 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=3ee8353a69 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3653 identity=43677 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/placement-db-sync-4r2mx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 cf20c000-64b4-4c94-8fae-5daacc2686e9 default }" containerID=9a95ec5b318d362dfb75e77de2b0cc0a94458e8d2e3eda3a5020caa126ae9c20 datapathConfiguration="&{false false false false false }" interface=lxcfc283c591731 k8sPodName=openstack/placement-ks-service-jjgk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a95ec5b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a95ec5b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a95ec5b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a95ec5b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=31308 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a95ec5b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=31308 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a95ec5b31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=938 identity=31308 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a95ec5b31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=938 identity=31308 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a95ec5b31 endpointID=938 k8sNamespace=openstack k8sPodName=placement-ks-service-jjgk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=2dd4f126-8236-40dd-a9cf-21da0e441930 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=9a95ec5b31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=938 identity=31308 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/placement-ks-service-jjgk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 a249ed0d-d7e9-4f03-bca1-0c18421a5911 default }" containerID=cb8e15f1e1d0cfd7d4f1377398c6df5152b8ba1abab1c11abe65a36e3974cb69 datapathConfiguration="&{false false false false false }" interface=lxc6e70266ca6e0 k8sPodName=openstack/placement-ks-user-jn4v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb8e15f1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb8e15f1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb8e15f1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=20218 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb8e15f1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=20218 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cb8e15f1e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=116 identity=20218 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb8e15f1e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=116 identity=20218 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb8e15f1e1 endpointID=116 k8sNamespace=openstack k8sPodName=placement-ks-user-jn4v8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=3b637334-b6be-4b5b-98af-17b2f9ce2ce5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=cb8e15f1e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=116 identity=20218 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/placement-ks-user-jn4v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 790d9117-817c-45f0-89d5-c857ee273db6 default }" containerID=b8956e31d413c3e14c4f06dcee0c9304ab178a5017148c6e61cced37b79d34ff datapathConfiguration="&{false false false false false }" interface=lxcfc71154dcc67 k8sPodName=openstack/placement-ks-endpoints-dw7l2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8956e31d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8956e31d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8956e31d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=4726 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8956e31d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=4726 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8956e31d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=100 identity=4726 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8956e31d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=100 identity=4726 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8956e31d4 endpointID=100 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-dw7l2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bf45d54a-ba66-41d6-aaa0-23e694409f24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=b8956e31d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=100 identity=4726 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/placement-ks-endpoints-dw7l2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 e7c69e35-b8df-4751-ab51-dddee29050ec default }" containerID=4e0a1a477596b4a939117ce8d45bec8d8c55ad8534e023ce8ad011409cc1d523 datapathConfiguration="&{false false false false false }" interface=lxc7b0a27435437 k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e0a1a4775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e0a1a4775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e0a1a4775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e0a1a4775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=28236 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e0a1a4775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=28236 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e0a1a4775 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1696 identity=28236 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e0a1a4775 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1696 identity=28236 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-2l6hp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 4b843a16-0f5d-45b5-a045-88cc83e1ba33 default }" containerID=755865eabd23ab15f0f7e054f3ebba6d9514391316358b78537c5fcbc47b85ae datapathConfiguration="&{false false false false false }" interface=lxceb1780996e0c k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=755865eabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=755865eabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=755865eabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=4432 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=755865eabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=4432 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=755865eabd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=969 identity=4432 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=755865eabd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=969 identity=4432 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 3f68271d-b3ff-49ca-b753-48599b224e15 default }" containerID=8d8cd45101d739a1e94b6333d970f6fe02fd6264f56d9cf3acce07136587ea4c datapathConfiguration="&{false false false false false }" interface=lxc5f3320dade37 k8sPodName=openstack/nova-conductor-94889f664-6nzgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d8cd45101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-94889f664-6nzgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d8cd45101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-94889f664-6nzgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d8cd45101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=17346 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-94889f664-6nzgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d8cd45101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=17346 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-94889f664-6nzgn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 7e4b580b-4a8e-4202-8d90-34cb0e4e46bd default }" containerID=cbd4cb5f561da71e610516e6aa7a7d487cbdd17f6bd965159e8db2193b9802d1 datapathConfiguration="&{false false false false false }" interface=lxc9c27fe3f47f9 k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbd4cb5f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbd4cb5f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbd4cb5f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=44908 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbd4cb5f56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=44908 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 0443dd47-eed6-4cc5-99df-9e3d3dd1ea97 default }" containerID=ec23e0b18719eb36724da67a94322cbb7e62f72583814eaeabe9c296bdf1b83b datapathConfiguration="&{false false false false false }" interface=lxc8930ad606326 k8sPodName=openstack/nova-cell-setup-8l6sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec23e0b187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec23e0b187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=81139861-8806-4db4-b598-e72969e265cd,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=81139861-8806-4db4-b598-e72969e265cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.222 faf4d421-ef1d-4362-a17d-7a22f82a9914 default }" containerID=7ca809e1b8021e34ed56a021c8f58e7f6d933f37a97996247ecca79d931a3098 datapathConfiguration="&{false false false false false }" interface=lxc44fe6731d9cd k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ca809e1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ca809e1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=81139861-8806-4db4-b598-e72969e265cd;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=81139861-8806-4db4-b598-e72969e265cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec23e0b187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=16102 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=81139861-8806-4db4-b598-e72969e265cd,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=81139861-8806-4db4-b598-e72969e265cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec23e0b187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=16102 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ca809e1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=54560 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ca809e1b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=54560 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d8cd45101 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=204 identity=17346 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-94889f664-6nzgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d8cd45101 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=204 identity=17346 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/nova-conductor-94889f664-6nzgn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 eca09a25-6021-4a16-bdc0-ab8be8d0dac8 default }" containerID=e77478156e125129e948d93b7a3aa831fab0582704963d6e1a568f6a25dbc6ab datapathConfiguration="&{false false false false false }" interface=lxcd64afe462416 k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e77478156e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e77478156e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=cbd4cb5f56 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1477 identity=44908 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbd4cb5f56 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1477 identity=44908 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/nova-scheduler-854754ffd8-4b4nn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 98a39c68-7026-41d6-aa91-f896ee8995b2 default }" containerID=72c47eec0872c4d1500f402c3bad69d6e885d7a2a1c55873e4129b8e578cd000 datapathConfiguration="&{false false false false false }" interface=lxcbbd58c43725d k8sPodName=openstack/nova-db-init-r9lvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72c47eec08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72c47eec08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec23e0b187 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=514 identity=16102 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec23e0b187 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=514 identity=16102 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 2da0534a-6814-464c-9263-6da482ab021d default }" containerID=2dabd6d4cabc2e91501cf5dedb31aebce1ceac4d0a7da05f87e93800e7fb9bf9 datapathConfiguration="&{false false false false false }" interface=lxcc4b5de4934de k8sPodName=openstack/nova-bootstrap-qr5rs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dabd6d4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dabd6d4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e77478156e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=24319 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e77478156e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=24319 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=7ca809e1b8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=662 identity=54560 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ca809e1b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=662 identity=54560 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/nova-api-osapi-f645b67d8-4zkkm subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72c47eec08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=36124 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=72c47eec08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=36124 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e77478156e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=48 identity=24319 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=e77478156e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=48 identity=24319 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-api-metadata-88d458cc5-7vr8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2dabd6d4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72c47eec08 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=76 identity=36124 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=72c47eec08 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=36124 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dabd6d4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=26825 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dabd6d4ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=554 identity=26825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 538f39bc-a727-4338-a5f7-688f17bd36ba default }" containerID=8d6f2a1d6e2540a8477c4258637d50179f23825190272188a6f4a59e0c5ce5a1 datapathConfiguration="&{false false false false false }" interface=lxc2a3f97f48ed0 k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d6f2a1d6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d6f2a1d6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=2dabd6d4ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=554 identity=26825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dabd6d4ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=554 identity=26825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d6f2a1d6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d6f2a1d6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=13838 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d6f2a1d6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=13838 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d6f2a1d6e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1752 identity=13838 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d6f2a1d6e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1752 identity=13838 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/nova-novncproxy-64c4bbcb97-4slzv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72c47eec08 endpointID=76 k8sNamespace=openstack k8sPodName=nova-db-init-r9lvt subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=2b5cc3f6-2f3e-4078-91f6-1eb248829b65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=72c47eec08 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=36124 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/nova-db-init-r9lvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 0d00a5df-06b4-45df-9b91-fb733ced95a8 default }" containerID=d1663e02f80e512a57c5a8c5b9e3694d3e881174a452f75b759d3dcd2d7ba328 datapathConfiguration="&{false false false false false }" interface=lxc8b29100fefc4 k8sPodName=openstack/nova-db-sync-6rm8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1663e02f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1663e02f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d1663e02f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d1663e02f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=33313 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1663e02f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=33313 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1663e02f8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1181 identity=33313 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1663e02f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1181 identity=33313 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1663e02f8 endpointID=1181 k8sNamespace=openstack k8sPodName=nova-db-sync-6rm8j subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=526bd41f-7ff8-46af-b820-f0a016f808ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=d1663e02f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1181 identity=33313 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/nova-db-sync-6rm8j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 9713aac3-afba-4a54-a3c8-a7052e474f6a default }" containerID=58934b29d87e6ce554b7414ad88fb554708db34507386d08d68d95868eb4c9b0 datapathConfiguration="&{false false false false false }" interface=lxc65aaa0d2951a k8sPodName=openstack/nova-rabbit-init-k9wk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58934b29d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2871 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58934b29d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2871 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=58934b29d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2871 identity=45965 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58934b29d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2871 identity=45965 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58934b29d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2871 identity=45965 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58934b29d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2871 identity=45965 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58934b29d8 endpointID=2871 k8sNamespace=openstack k8sPodName=nova-rabbit-init-k9wk7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380 k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b2d615cd-43bf-4a5f-addc-26ce95ae4380 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=58934b29d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2871 identity=45965 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/nova-rabbit-init-k9wk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 a045d2d3-ef21-481f-adca-ddbd778847bd default }" containerID=8aa6b2ccd1c1808a0b14a52647e6e1062237b785c4692397a74ba10d4f0b770e datapathConfiguration="&{false false false false false }" interface=lxc206112d5ac72 k8sPodName=openstack/nova-ks-service-54cm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aa6b2ccd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aa6b2ccd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ccce298f-605c-4aea-a8d2-14c056971279,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=ccce298f-605c-4aea-a8d2-14c056971279,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=ccce298f-605c-4aea-a8d2-14c056971279;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=ccce298f-605c-4aea-a8d2-14c056971279;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aa6b2ccd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identity=11081 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=ccce298f-605c-4aea-a8d2-14c056971279,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=ccce298f-605c-4aea-a8d2-14c056971279,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aa6b2ccd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1065 identity=11081 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aa6b2ccd1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1065 identity=11081 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aa6b2ccd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1065 identity=11081 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8aa6b2ccd1 endpointID=1065 k8sNamespace=openstack k8sPodName=nova-ks-service-54cm9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=ccce298f-605c-4aea-a8d2-14c056971279 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=ccce298f-605c-4aea-a8d2-14c056971279 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=8aa6b2ccd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1065 identity=11081 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/nova-ks-service-54cm9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 a421a720-749d-41a9-8826-db4a26e755c9 default }" containerID=7a90e8fb3db1000215e289b52b407a33d8a66851a3c4c64e6346b85258ac8831 datapathConfiguration="&{false false false false false }" interface=lxc87c5698cb78f k8sPodName=openstack/nova-ks-endpoints-ltlg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a90e8fb3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a90e8fb3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a90e8fb3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=13688 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a90e8fb3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=13688 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a90e8fb3d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3530 identity=13688 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a90e8fb3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3530 identity=13688 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a90e8fb3d endpointID=3530 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-ltlg2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2 k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0f55c4bf-4d76-49f0-a454-dca3cb9216f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7a90e8fb3d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3530 identity=13688 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/nova-ks-endpoints-ltlg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 b97571a9-dfbf-4cfa-a98a-07703d8e0021 default }" containerID=764953164c912250b1ac38386cb0f2ab0bdded6fb2ab95144c0861d77381788c datapathConfiguration="&{false false false false false }" interface=lxc505b91080a39 k8sPodName=openstack/nova-ks-user-zhcpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=764953164c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=764953164c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=764953164c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=35769 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=764953164c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=35769 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=764953164c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=163 identity=35769 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=764953164c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=163 identity=35769 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=764953164c endpointID=163 k8sNamespace=openstack k8sPodName=nova-ks-user-zhcpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=c9417e41-08d0-4320-8bda-b43aedc5c120 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=764953164c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=163 identity=35769 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/nova-ks-user-zhcpw subsys=endpoint level=info msg="Delete endpoint request" containerID=2dabd6d4ca endpointID=554 k8sNamespace=openstack k8sPodName=nova-bootstrap-qr5rs subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=5baaf730-d3e6-4135-ba5e-5744221b244d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=2dabd6d4ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=554 identity=26825 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/nova-bootstrap-qr5rs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 b08fa294-d2b4-44ac-ae7b-4c178ab3b626 default }" containerID=40e8fab1f199e1c6bb245ca8ee2391ecc8c58b1b115f7f8886a0713e3cb3ca70 datapathConfiguration="&{false false false false false }" interface=lxc39f1712e276c k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40e8fab1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40e8fab1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40e8fab1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40e8fab1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identity=39584 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40e8fab1f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identity=39584 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40e8fab1f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2819 identity=39584 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40e8fab1f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2819 identity=39584 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 6b8e9245-1ebd-46b0-9016-a2b53f77a8f3 default }" containerID=735e79ad5ede7e4e2bfc5813eb99e29cf8011ce4fa2618bc70503aefbf2e6122 datapathConfiguration="&{false false false false false }" interface=lxc49689b0e211a k8sPodName=openstack/neutron-server-68f59c764-58ljx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=735e79ad5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=735e79ad5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=735e79ad5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=735e79ad5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=57169 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=735e79ad5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=57169 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 bff970ae-85d6-409b-80d8-1cee49159e43 default }" containerID=1323a0fc11e3d3f852e267e4311022c3882782b99f9c913398e8cdef53b509d1 datapathConfiguration="&{false false false false false }" interface=lxc3c727ec7632b k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1323a0fc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1323a0fc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1323a0fc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identity=59926 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1323a0fc11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identity=59926 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=735e79ad5e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2206 identity=57169 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx subsys=endpoint level=info msg="Successful endpoint creation" containerID=735e79ad5e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2206 identity=57169 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/neutron-server-68f59c764-58ljx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 8ea73ca1-8620-4489-b31d-f88f20cb67e8 default }" containerID=85b86024780f9c4ca715c57421c50ca830dbf324bcb8cca15b77a50fdc08cf3b datapathConfiguration="&{false false false false false }" interface=lxc31221288e094 k8sPodName=openstack/neutron-db-init-fmpdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85b8602478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85b8602478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85b8602478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=48607 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85b8602478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=48607 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1323a0fc11 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2141 identity=59926 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1323a0fc11 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2141 identity=59926 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/neutron-rpc-server-785f5d789b-694dt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=85b8602478 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1213 identity=48607 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=85b8602478 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1213 identity=48607 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85b8602478 endpointID=1213 k8sNamespace=openstack k8sPodName=neutron-db-init-fmpdq subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=2cd534d5-c6d3-40d8-ae61-9925ec153bd0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=85b8602478 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1213 identity=48607 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/neutron-db-init-fmpdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 0bea8509-31aa-4be7-ba31-ac5a0083acad default }" containerID=0f4ce1bac7ae8a7e8f415dc77755c1946b1118ed84d85b206ef16d3b5a205e9a datapathConfiguration="&{false false false false false }" interface=lxc005b6c2c5303 k8sPodName=openstack/neutron-db-sync-cvgw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f4ce1bac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f4ce1bac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f4ce1bac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=20222 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f4ce1bac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=20222 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f4ce1bac7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=23 identity=20222 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f4ce1bac7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=23 identity=20222 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f4ce1bac7 endpointID=23 k8sNamespace=openstack k8sPodName=neutron-db-sync-cvgw7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=1f7589c6-46b5-42f9-8746-36f4effc4987 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=0f4ce1bac7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=23 identity=20222 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/neutron-db-sync-cvgw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 cbc6bb5e-6198-49b5-8199-17f99cc0326c default }" containerID=e4a37d60f6611e3b9e86ae71094d01c5d00dea307821eb4fc4368d6b14e0df28 datapathConfiguration="&{false false false false false }" interface=lxc5f5ae3a59b75 k8sPodName=openstack/neutron-rabbit-init-2sx52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4a37d60f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4a37d60f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4a37d60f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=16419 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4a37d60f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=16419 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e4a37d60f6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1256 identity=16419 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4a37d60f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1256 identity=16419 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4a37d60f6 endpointID=1256 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-2sx52 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4e739c10-6dec-4831-904c-da98b9f7027b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=e4a37d60f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1256 identity=16419 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/neutron-rabbit-init-2sx52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 7ed49a58-7507-4d3b-8283-2d47833e9318 default }" containerID=c4e104a4e3e7170c100545cc947884deeec8ed4f3bd2eb9c9ae35d6692a465ec datapathConfiguration="&{false false false false false }" interface=lxc919f7a950e78 k8sPodName=openstack/neutron-ks-service-9skdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4e104a4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4e104a4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c4e104a4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4e104a4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=58908 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4e104a4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=58908 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4e104a4e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=122 identity=58908 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4e104a4e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=122 identity=58908 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4e104a4e3 endpointID=122 k8sNamespace=openstack k8sPodName=neutron-ks-service-9skdq subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=e2639799-d012-4c9f-a35e-50096c668e9b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=c4e104a4e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=122 identity=58908 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/neutron-ks-service-9skdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 e1fb9f88-2c5a-4919-aca5-6c5804b3f476 default }" containerID=5b83972e92758fb1078dd242657e6645ca182d81f88c59d50eba3eeab8b31b0c datapathConfiguration="&{false false false false false }" interface=lxc736a3b02166f k8sPodName=openstack/neutron-ks-endpoints-r7p9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b83972e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b83972e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b83972e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=30812 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b83972e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=30812 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5b83972e92 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1603 identity=30812 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b83972e92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1603 identity=30812 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v subsys=daemon level=info msg="Delete endpoint request" containerID=5b83972e92 endpointID=1603 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-r7p9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a2c2dfe8-f6e2-4afe-9aa4-22bd6230d376 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5b83972e92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1603 identity=30812 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/neutron-ks-endpoints-r7p9v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 b8d100f9-ede2-4cc8-9d04-38aab8ee1dcc default }" containerID=e57b63efa89c6f79aa16cb06fde824f713b4a09b81edaff17d4f00523e23df09 datapathConfiguration="&{false false false false false }" interface=lxc6e9212e03879 k8sPodName=openstack/neutron-ks-user-kgscq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e57b63efa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e57b63efa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e57b63efa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=37201 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e57b63efa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=37201 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e57b63efa8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1151 identity=37201 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e57b63efa8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1151 identity=37201 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e57b63efa8 endpointID=1151 k8sNamespace=openstack k8sPodName=neutron-ks-user-kgscq subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=8c783528-8438-4297-b8dd-dfc7322204ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=e57b63efa8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1151 identity=37201 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/neutron-ks-user-kgscq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 24f746c1-ae8a-46e8-b85b-7d06926ecac3 default }" containerID=ac6c4a139f2426d8e77550c9eb162ff9aa0c1d9d8cf7756a9d2662bc63ac3eb9 datapathConfiguration="&{false false false false false }" interface=lxc7f5f1dd5d16c k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac6c4a139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac6c4a139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac6c4a139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=59237 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ac6c4a139f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=59237 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac6c4a139f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1359 identity=59237 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac6c4a139f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1359 identity=59237 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 be68ddf7-f7bd-4b24-8e5c-4acceb87cf73 default }" containerID=2d53f9c21fe4a5c275ad16dbd7f2380c77186f5f97418bae06eba66d9d189109 datapathConfiguration="&{false false false false false }" interface=lxc53a2e0ffd3e5 k8sPodName=openstack/heat-engine-649497fc77-qwdhk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d53f9c21f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/heat-engine-649497fc77-qwdhk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d53f9c21f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/heat-engine-649497fc77-qwdhk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d53f9c21f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=43904 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/heat-engine-649497fc77-qwdhk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d53f9c21f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=43904 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/heat-engine-649497fc77-qwdhk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 6100ae42-df7f-48ed-a0c0-b0db10490769 default }" containerID=d792c006dbe6f3856f54e4021d1d45ca78dc535c8fd4a14eebd634d7f5d1f015 datapathConfiguration="&{false false false false false }" interface=lxcd8e456a58bb4 k8sPodName=openstack/heat-db-init-nfv64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d792c006db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d792c006db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d792c006db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=9989 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d792c006db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=9989 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 c664c5d4-97a2-4d1e-93e8-7514765f5cb8 default }" containerID=cddcd3daf4ab80492c88b9dae964974d8393b13542730826858524a87cefb2a7 datapathConfiguration="&{false false false false false }" interface=lxc465eab523aa6 k8sPodName=openstack/heat-api-665c69bc84-4h7x7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cddcd3daf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/heat-api-665c69bc84-4h7x7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cddcd3daf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/heat-api-665c69bc84-4h7x7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cddcd3daf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identity=17970 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/heat-api-665c69bc84-4h7x7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cddcd3daf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identity=17970 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/heat-api-665c69bc84-4h7x7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d53f9c21f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2551 identity=43904 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/heat-engine-649497fc77-qwdhk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d53f9c21f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2551 identity=43904 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/heat-engine-649497fc77-qwdhk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 988f5c8e-9fc8-4a84-a5ff-661d55616656 default }" containerID=4b8b4a8e4a0eb55651009c5c59237a27d4e4671b7342177c28c0ea874c4a5eea datapathConfiguration="&{false false false false false }" interface=lxcc239bc4be0d9 k8sPodName=openstack/heat-cfn-5d486b4466-drkbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b8b4a8e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/heat-cfn-5d486b4466-drkbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b8b4a8e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/heat-cfn-5d486b4466-drkbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b8b4a8e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=57677 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/heat-cfn-5d486b4466-drkbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b8b4a8e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=57677 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/heat-cfn-5d486b4466-drkbl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d792c006db datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=742 identity=9989 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d792c006db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=742 identity=9989 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cddcd3daf4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3645 identity=17970 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/heat-api-665c69bc84-4h7x7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cddcd3daf4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3645 identity=17970 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/heat-api-665c69bc84-4h7x7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4b8b4a8e4a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1648 identity=57677 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/heat-cfn-5d486b4466-drkbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b8b4a8e4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1648 identity=57677 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/heat-cfn-5d486b4466-drkbl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d792c006db endpointID=742 k8sNamespace=openstack k8sPodName=heat-db-init-nfv64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904 k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=359e5bba-1326-4fd3-8c27-261ab66d3904 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=d792c006db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=742 identity=9989 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/heat-db-init-nfv64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 4f04cac6-89a1-44ec-a6f5-a1d8ab1ca5d9 default }" containerID=5b5f4b93858185eb159d35818914737638e180a4bc88944586717f8aa455d3b1 datapathConfiguration="&{false false false false false }" interface=lxc45f6d1ef89c9 k8sPodName=openstack/heat-db-sync-h45fj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b5f4b9385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b5f4b9385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b5f4b9385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=5173 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b5f4b9385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=5173 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5b5f4b9385 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1619 identity=5173 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b5f4b9385 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1619 identity=5173 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b5f4b9385 endpointID=1619 k8sNamespace=openstack k8sPodName=heat-db-sync-h45fj subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=2060e790-77e0-4346-8a2e-14f3c820178b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=5b5f4b9385 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1619 identity=5173 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/heat-db-sync-h45fj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 017c8f23-b680-4cfb-ade1-5ee6cc43f412 default }" containerID=3a611cf95603e6198f9efa6325c0eef8f3bed12be582db473048d329dbe8a53e datapathConfiguration="&{false false false false false }" interface=lxcbe39640c0ec2 k8sPodName=openstack/heat-rabbit-init-7chjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a611cf956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a611cf956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=467875ad-97be-42d8-be14-bf6c8257e328,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=467875ad-97be-42d8-be14-bf6c8257e328,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=467875ad-97be-42d8-be14-bf6c8257e328;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=467875ad-97be-42d8-be14-bf6c8257e328;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a611cf956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=42451 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=467875ad-97be-42d8-be14-bf6c8257e328,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=467875ad-97be-42d8-be14-bf6c8257e328,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a611cf956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=42451 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a611cf956 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3476 identity=42451 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a611cf956 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3476 identity=42451 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a611cf956 endpointID=3476 k8sNamespace=openstack k8sPodName=heat-rabbit-init-7chjr subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=467875ad-97be-42d8-be14-bf6c8257e328 k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=467875ad-97be-42d8-be14-bf6c8257e328 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=3a611cf956 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3476 identity=42451 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/heat-rabbit-init-7chjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 aa72f67c-2d29-4c23-bd3c-2c98448bb8fe default }" containerID=f889d88160b10dab1c135f45c54ece0bfadd2f6aac28cd8a3338cea916e185f1 datapathConfiguration="&{false false false false false }" interface=lxc2e9655e9611d k8sPodName=openstack/heat-ks-service-q6vdf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f889d88160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f889d88160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f889d88160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f889d88160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=3347 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f889d88160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=3347 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f889d88160 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2916 identity=3347 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f889d88160 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2916 identity=3347 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f889d88160 endpointID=2916 k8sNamespace=openstack k8sPodName=heat-ks-service-q6vdf subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=50bc79d5-e9f3-4fd8-84ed-4c96736908cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=f889d88160 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2916 identity=3347 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/heat-ks-service-q6vdf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 bb818d4e-69a0-471f-8bc5-1bec85e0e6e7 default }" containerID=ff11d2bf1619ee7ecb4c0e39933ddece65f940e497e88f87f1390b6a8e0af6f3 datapathConfiguration="&{false false false false false }" interface=lxcc75fe50b5dcc k8sPodName=openstack/heat-ks-endpoints-fc2n5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff11d2bf16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff11d2bf16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff11d2bf16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=61167 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff11d2bf16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=61167 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ff11d2bf16 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3614 identity=61167 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff11d2bf16 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3614 identity=61167 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 subsys=daemon level=info msg="Delete endpoint request" containerID=ff11d2bf16 endpointID=3614 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-fc2n5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3b10b73f-5a24-4dc6-afa5-6f8a707fb180 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=ff11d2bf16 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3614 identity=61167 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/heat-ks-endpoints-fc2n5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 789f375f-300f-40a0-9626-ade663fca1ea default }" containerID=4fe424889097efbef2350a57b261ef5cb4f57b272977602d348974fc0d2ce1b4 datapathConfiguration="&{false false false false false }" interface=lxc659655832601 k8sPodName=openstack/heat-ks-user-l9vqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fe4248890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fe4248890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fe4248890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=9285 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fe4248890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=9285 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fe4248890 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1182 identity=9285 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fe4248890 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1182 identity=9285 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec23e0b187 endpointID=514 k8sNamespace=openstack k8sPodName=nova-cell-setup-8l6sf subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=81139861-8806-4db4-b598-e72969e265cd k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=81139861-8806-4db4-b598-e72969e265cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=ec23e0b187 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=514 identity=16102 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/nova-cell-setup-8l6sf subsys=endpoint level=info msg="Delete endpoint request" containerID=4fe4248890 endpointID=1182 k8sNamespace=openstack k8sPodName=heat-ks-user-l9vqp subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=2cb0a5d8-6e07-4cff-9147-2a6cdc15323b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=4fe4248890 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1182 identity=9285 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/heat-ks-user-l9vqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 ae31b2a3-d4a4-4f51-ba5a-10769422c844 default }" containerID=efbfa6eb596f8dc519f2baf76f2f6d20d21986c2442851fff70847eebcc08666 datapathConfiguration="&{false false false false false }" interface=lxc5df1fd8d7a38 k8sPodName=openstack/heat-bootstrap-hbdsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efbfa6eb59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efbfa6eb59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efbfa6eb59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=64465 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=efbfa6eb59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=64465 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efbfa6eb59 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2757 identity=64465 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=efbfa6eb59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2757 identity=64465 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=efbfa6eb59 endpointID=2757 k8sNamespace=openstack k8sPodName=heat-bootstrap-hbdsh subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6 k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=2ca7ef9d-c41f-4165-b07f-86e69f3784b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=efbfa6eb59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2757 identity=64465 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/heat-bootstrap-hbdsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 4311ef1f-9613-4792-85c8-2908351314b0 default }" containerID=b6d834eede7cb60b911e00ec0d80123450fd0d2a19bf9afe0ea272c615736cf4 datapathConfiguration="&{false false false false false }" interface=lxcf72168a2bc43 k8sPodName=openstack/heat-domain-ks-user-4ggzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6d834eede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6d834eede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6d834eede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=8547 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6d834eede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=8547 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b6d834eede datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1046 identity=8547 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6d834eede datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1046 identity=8547 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6d834eede endpointID=1046 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-4ggzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0 k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=54f11d8e-e3fc-463d-b48d-ca8672662fe0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=b6d834eede datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1046 identity=8547 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/heat-domain-ks-user-4ggzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 d789c458-39eb-46c6-bc2b-658cc91bdbec default }" containerID=f82ce3ac7bcfd321b583ec801f16abcbfaf9ebe0cd63bb7e6e81183ca6884671 datapathConfiguration="&{false false false false false }" interface=lxc85e506fcd17c k8sPodName=openstack/heat-trusts-qn4l2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f82ce3ac7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f82ce3ac7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=cba54171-3751-489b-80cc-765b83beae9b,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=cba54171-3751-489b-80cc-765b83beae9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=cba54171-3751-489b-80cc-765b83beae9b;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=cba54171-3751-489b-80cc-765b83beae9b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f82ce3ac7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=31576 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=cba54171-3751-489b-80cc-765b83beae9b,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=cba54171-3751-489b-80cc-765b83beae9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f82ce3ac7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=31576 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f82ce3ac7b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=686 identity=31576 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f82ce3ac7b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=686 identity=31576 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f82ce3ac7b endpointID=686 k8sNamespace=openstack k8sPodName=heat-trusts-qn4l2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=cba54171-3751-489b-80cc-765b83beae9b k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=cba54171-3751-489b-80cc-765b83beae9b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=f82ce3ac7b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=686 identity=31576 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/heat-trusts-qn4l2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 3e82c224-466d-40b8-ae4e-6845b0e4a4ea default }" containerID=607adbd7ca1edf0cfc16ccec551b27ee614de57758345a952d85816ed5ab0186 datapathConfiguration="&{false false false false false }" interface=lxce16319fd2ff9 k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=607adbd7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=607adbd7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475,k8s:component=engine-cleaner,k8s:controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757475,k8s:release_group=heat" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475;k8s:component=engine-cleaner;k8s:controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757475;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=607adbd7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=22746 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475,k8s:component=engine-cleaner,k8s:controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757475,k8s:release_group=heat" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=607adbd7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=22746 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=607adbd7ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1176 identity=22746 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=607adbd7ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1176 identity=22746 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=607adbd7ca endpointID=1176 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757475-bj6pp subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475 k8s:component=engine-cleaner k8s:controller-uid=18d47c5f-7b4c-4e2d-8302-b7594354088e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757475 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=607adbd7ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1176 identity=22746 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-bj6pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 5573b26f-3810-4960-9d21-7ea6583a7b79 default }" containerID=577cfbd9b797c31f451d68eac9a6107e4255baaa06a3fcae4c80e3f3ed9cda95 datapathConfiguration="&{false false false false false }" interface=lxcf0f976f57c61 k8sPodName=openstack/rabbitmq-octavia-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=577cfbd9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=577cfbd9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-octavia;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=577cfbd9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=577cfbd9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 identity=33420 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-octavia,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-octavia-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-octavia-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=577cfbd9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 identity=33420 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=577cfbd9b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2680 identity=33420 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=577cfbd9b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2680 identity=33420 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-octavia-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 f20629a6-2558-4e0f-b4cf-ed5d91c43ed2 default }" containerID=9ed49d80fecf2b2142feed6d116cc9c33a1681f86e7ec61208c3e0f0401c5b17 datapathConfiguration="&{false false false false false }" interface=lxc8c0a896a2240 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ed49d80fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ed49d80fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ed49d80fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ed49d80fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=64367 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ed49d80fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=64367 ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ed49d80fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=786 identity=64367 ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ed49d80fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=786 identity=64367 ipv4=10.0.0.224 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-6vg77 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 ef61f4e8-9285-4bbc-9e6e-39674ffcbdd7 default }" containerID=2b09d56fceda32940abb52aa9b0221de26f2d364ede2b999ab4d07d45bb005d9 datapathConfiguration="&{false false false false false }" interface=lxc909ff15169b4 k8sPodName=openstack/octavia-db-init-z5wrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b09d56fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b09d56fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296;k8s:batch.kubernetes.io/job-name=octavia-db-init;k8s:component=db-init;k8s:controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b09d56fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=15720 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296,k8s:batch.kubernetes.io/job-name=octavia-db-init,k8s:component=db-init,k8s:controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-init,k8s:release_group=octavia" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b09d56fce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=15720 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b09d56fce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=580 identity=15720 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b09d56fce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=580 identity=15720 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b09d56fce endpointID=580 k8sNamespace=openstack k8sPodName=octavia-db-init-z5wrl subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296 k8s:batch.kubernetes.io/job-name=octavia-db-init k8s:component=db-init k8s:controller-uid=45ec6354-05c7-4480-861c-6fd8ff8b8296 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=2b09d56fce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=580 identity=15720 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/octavia-db-init-z5wrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 f0fb0b7e-eb27-469a-9d96-7ceed7477259 default }" containerID=6bec2466dcef8b9fe3ef2e387720557160f993072db47a48624badc3991deae0 datapathConfiguration="&{false false false false false }" interface=lxccf388674c164 k8sPodName=openstack/octavia-db-sync-ljcnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bec2466dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bec2466dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35;k8s:batch.kubernetes.io/job-name=octavia-db-sync;k8s:component=db-sync;k8s:controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-db-sync;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bec2466dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identity=2828 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35,k8s:batch.kubernetes.io/job-name=octavia-db-sync,k8s:component=db-sync,k8s:controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-db-sync,k8s:release_group=octavia" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bec2466dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3258 identity=2828 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bec2466dc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3258 identity=2828 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bec2466dc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3258 identity=2828 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 7d30afac-5df9-4538-b5ee-da7af481950c default }" containerID=70baf0eb18b4371ec7179524e57ace073406e097d48b80cc4925d76fb30a4cf3 datapathConfiguration="&{false false false false false }" interface=lxc15f5abf03133 k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70baf0eb18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70baf0eb18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e5a45a04-a59a-4844-a547-f980647d6401,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=e5a45a04-a59a-4844-a547-f980647d6401,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e5a45a04-a59a-4844-a547-f980647d6401;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480;k8s:component=service-cleaner;k8s:controller-uid=e5a45a04-a59a-4844-a547-f980647d6401;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70baf0eb18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=21572 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e5a45a04-a59a-4844-a547-f980647d6401,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=e5a45a04-a59a-4844-a547-f980647d6401,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=70baf0eb18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=21572 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 293dfc96-ebab-4997-88df-156f1253d099 default }" containerID=35fe3f0f27340d7821c807405da95a64768ebeabeba850574909f70ffd996619 datapathConfiguration="&{false false false false false }" interface=lxc42e639a9e46c k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35fe3f0f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35fe3f0f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480,k8s:component=engine-cleaner,k8s:controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757480,k8s:release_group=heat" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.107 210af3fe-339a-4650-ad2a-8c5bb53c7062 default }" containerID=49f3a5976bf973a204e68eb90540372fcac22347ef0499d96981c45541275050 datapathConfiguration="&{false false false false false }" interface=lxc5f80d9604cf5 k8sPodName=openstack/nova-cell-setup-29757480-2f2hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49f3a5976b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49f3a5976b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480;k8s:component=engine-cleaner;k8s:controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757480;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35fe3f0f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=4102 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480,k8s:component=engine-cleaner,k8s:controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757480,k8s:release_group=heat" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35fe3f0f27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=4102 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480;k8s:component=cell-setup;k8s:controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49f3a5976b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=4011 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49f3a5976b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=4011 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70baf0eb18 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2823 identity=21572 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=70baf0eb18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2823 identity=21572 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=35fe3f0f27 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3956 identity=4102 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q subsys=endpoint level=info msg="Successful endpoint creation" containerID=35fe3f0f27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3956 identity=4102 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49f3a5976b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2152 identity=4011 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=49f3a5976b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2152 identity=4011 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35fe3f0f27 endpointID=3956 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757480-62w5q subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480 k8s:component=engine-cleaner k8s:controller-uid=871e9f13-f86c-47ff-a364-5e6a80834137 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757480 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=35fe3f0f27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3956 identity=4102 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-62w5q subsys=endpoint level=info msg="Delete endpoint request" containerID=49f3a5976b endpointID=2152 k8sNamespace=openstack k8sPodName=nova-cell-setup-29757480-2f2hv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2 k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480 k8s:component=cell-setup k8s:controller-uid=c89d3211-37f8-4e37-8f35-274ef54f2da2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=49f3a5976b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2152 identity=4011 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-2f2hv subsys=endpoint level=info msg="Delete endpoint request" containerID=70baf0eb18 endpointID=2823 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29757480-rpgqw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e5a45a04-a59a-4844-a547-f980647d6401 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480 k8s:component=service-cleaner k8s:controller-uid=e5a45a04-a59a-4844-a547-f980647d6401 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=70baf0eb18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2823 identity=21572 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-rpgqw subsys=endpoint level=info msg="Delete endpoint request" containerID=6bec2466dc endpointID=3258 k8sNamespace=openstack k8sPodName=octavia-db-sync-ljcnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35 k8s:batch.kubernetes.io/job-name=octavia-db-sync k8s:component=db-sync k8s:controller-uid=2f5447f5-7d68-4da8-a1ae-8460466e9e35 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-db-sync k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=6bec2466dc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3258 identity=2828 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/octavia-db-sync-ljcnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 2db5d3a9-4083-4ef6-84b6-02b9f4868146 default }" containerID=fb71e6ab7fe4d27920d739f9521703387f7c2d702f22bace4b66056eb5600733 datapathConfiguration="&{false false false false false }" interface=lxce7d991a983f3 k8sPodName=openstack/octavia-rabbit-init-dt8sx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb71e6ab7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb71e6ab7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c;k8s:batch.kubernetes.io/job-name=octavia-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-rabbit-init;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb71e6ab7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=5085 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c,k8s:batch.kubernetes.io/job-name=octavia-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-rabbit-init,k8s:release_group=octavia" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb71e6ab7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=5085 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb71e6ab7f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=603 identity=5085 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb71e6ab7f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=603 identity=5085 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb71e6ab7f endpointID=603 k8sNamespace=openstack k8sPodName=octavia-rabbit-init-dt8sx subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c k8s:batch.kubernetes.io/job-name=octavia-rabbit-init k8s:component=rabbit-init k8s:controller-uid=eb1f3e22-765d-4716-bead-865bc2d43a1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-rabbit-init k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=fb71e6ab7f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=603 identity=5085 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/octavia-rabbit-init-dt8sx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 3b119dd2-61d5-4802-9d07-3b216da8767e default }" containerID=090bdc27e97f0a1094616ae5ace2e052a0fb2568c308354ff8744ea3aa80c0e6 datapathConfiguration="&{false false false false false }" interface=lxcb8cb58082193 k8sPodName=openstack/octavia-ks-service-s5gvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=090bdc27e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=090bdc27e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1;k8s:batch.kubernetes.io/job-name=octavia-ks-service;k8s:component=ks-service;k8s:controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-service;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=090bdc27e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=25618 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1,k8s:batch.kubernetes.io/job-name=octavia-ks-service,k8s:component=ks-service,k8s:controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-service,k8s:release_group=octavia" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=090bdc27e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=25618 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=090bdc27e9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1614 identity=25618 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=090bdc27e9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1614 identity=25618 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=090bdc27e9 endpointID=1614 k8sNamespace=openstack k8sPodName=octavia-ks-service-s5gvp subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1 k8s:batch.kubernetes.io/job-name=octavia-ks-service k8s:component=ks-service k8s:controller-uid=e3b40cb3-bae4-492a-a462-446decb797f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-service k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=090bdc27e9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1614 identity=25618 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/octavia-ks-service-s5gvp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 95626e3e-323e-4e5a-b9c5-0e966e37879c default }" containerID=c9a182232c73570708915545508b5dfb76e440ae588c6ff66aa2cd0e49cd322b datapathConfiguration="&{false false false false false }" interface=lxccf9e31ac10e9 k8sPodName=openstack/octavia-ks-endpoints-vdcxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9a182232c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9a182232c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500;k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-endpoints;k8s:release_group=octavia;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c9a182232c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=51141 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500,k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-endpoints,k8s:release_group=octavia" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9a182232c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=51141 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9a182232c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=338 identity=51141 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9a182232c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=338 identity=51141 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9a182232c endpointID=338 k8sNamespace=openstack k8sPodName=octavia-ks-endpoints-vdcxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500 k8s:batch.kubernetes.io/job-name=octavia-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e2b32c83-1de7-4ba5-bbd3-9334e9e12500 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-endpoints k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=c9a182232c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=338 identity=51141 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/octavia-ks-endpoints-vdcxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 92753ce9-7c25-421a-8cc4-b0d087ff1b0e default }" containerID=fe5ffd95b55882c0379a199d638eda4c128050262855ed0d7d09f58f4b24b9d8 datapathConfiguration="&{false false false false false }" interface=lxceb91780ad2cf k8sPodName=openstack/octavia-ks-user-xgkxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe5ffd95b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe5ffd95b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f;k8s:batch.kubernetes.io/job-name=octavia-ks-user;k8s:component=ks-user;k8s:controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-ks-user;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe5ffd95b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=57465 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f,k8s:batch.kubernetes.io/job-name=octavia-ks-user,k8s:component=ks-user,k8s:controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-ks-user,k8s:release_group=octavia" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe5ffd95b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=57465 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe5ffd95b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2145 identity=57465 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe5ffd95b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2145 identity=57465 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc subsys=daemon level=info msg="Delete endpoint request" containerID=fe5ffd95b5 endpointID=2145 k8sNamespace=openstack k8sPodName=octavia-ks-user-xgkxc subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f k8s:batch.kubernetes.io/job-name=octavia-ks-user k8s:component=ks-user k8s:controller-uid=f3b408ef-e657-4c62-90d5-52eb549ad48f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-ks-user k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=fe5ffd95b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2145 identity=57465 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/octavia-ks-user-xgkxc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 422255c2-dcf0-4ef1-934d-d875a19e7080 default }" containerID=c967584c5b76dca806b4bb1ce6d37382f9579cb7ba246b4a52814d1e9d806bef datapathConfiguration="&{false false false false false }" interface=lxc252e0ce1bd80 k8sPodName=openstack/octavia-bootstrap-znqcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c967584c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c967584c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=octavia;k8s:batch.kubernetes.io/controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d;k8s:batch.kubernetes.io/job-name=octavia-bootstrap;k8s:component=bootstrap;k8s:controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=octavia-bootstrap;k8s:release_group=octavia;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c967584c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 identity=62424 identityLabels="k8s:application=octavia,k8s:batch.kubernetes.io/controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d,k8s:batch.kubernetes.io/job-name=octavia-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=octavia-bootstrap,k8s:release_group=octavia" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c967584c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2361 identity=62424 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c967584c5b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2361 identity=62424 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c967584c5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2361 identity=62424 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs subsys=daemon level=info msg="Delete endpoint request" containerID=c967584c5b endpointID=2361 k8sNamespace=openstack k8sPodName=octavia-bootstrap-znqcs subsys=daemon level=info msg="Releasing key" key="[k8s:application=octavia k8s:batch.kubernetes.io/controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d k8s:batch.kubernetes.io/job-name=octavia-bootstrap k8s:component=bootstrap k8s:controller-uid=9d4a2a25-160f-4a7a-82ba-a247d775570d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=octavia-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=octavia-bootstrap k8s:release_group=octavia]" subsys=allocator level=info msg="Removed endpoint" containerID=c967584c5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2361 identity=62424 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/octavia-bootstrap-znqcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 a2615e95-a527-46c6-b6d3-18b0f929802f default }" containerID=299bfe767daf9faaed002344f167539f14144a2cf055f968c2358cb56b7b4556 datapathConfiguration="&{false false false false false }" interface=lxcb2b3c823adbb k8sPodName=openstack/rabbitmq-magnum-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=299bfe767d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=299bfe767d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-magnum;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=299bfe767d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=17300 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-magnum,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-magnum-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-magnum-server-0" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=299bfe767d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=17300 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=299bfe767d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3818 identity=17300 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=299bfe767d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3818 identity=17300 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-magnum-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 7db59fa6-826a-4ea8-b419-cb6b0bc36756 default }" containerID=d184b4c6ac95aaf3667752a00c97c362cf72c49ed2a5f6fb1d8112f81abde4fe datapathConfiguration="&{false false false false false }" interface=lxcf0a9dfa49afe k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d184b4c6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 ipv4=10.0.0.77 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d184b4c6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.77 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by:kustomize k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name:orc k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:orc-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize;k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager;k8s:io.kubernetes.pod.namespace=orc-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d184b4c6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 identity=33485 identityLabels="k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/managed-by=kustomize,k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=orc,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=orc-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=orc-controller-manager,k8s:io.kubernetes.pod.namespace=orc-system" ipv4=10.0.0.77 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d184b4c6ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3629 identity=33485 ipv4=10.0.0.77 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d184b4c6ac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3629 identity=33485 ipv4=10.0.0.77 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d184b4c6ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3629 identity=33485 ipv4=10.0.0.77 ipv6= k8sPodName=orc-system/orc-controller-manager-6cb597b5d4-hwm8g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 914d8aac-4beb-4cf5-8c82-37e25fd7b33f default }" containerID=6929b20fb6d72ed116eec1409458d097f4fce0845c5a205bd0a2c5e2fe06465f datapathConfiguration="&{false false false false false }" interface=lxc42ec9d09d626 k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6929b20fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6929b20fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6929b20fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=cluster-api;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-manager;k8s:io.kubernetes.pod.namespace=capi-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6929b20fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identity=15340 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6929b20fb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identity=15340 ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6929b20fb6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3439 identity=15340 ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6929b20fb6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3439 identity=15340 ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 edd3e397-680e-4510-b126-87a287cae51b default }" containerID=20a2ba388e1e7e30d82bbe1f90a7a767bb07fd204c00e036cc4a37fac4a8b9f0 datapathConfiguration="&{false false false false false }" interface=lxcd256ec553d34 k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20a2ba388e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20a2ba388e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-bootstrap-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20a2ba388e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=20183 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20a2ba388e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=20183 ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20a2ba388e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2976 identity=20183 ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=endpoint level=info msg="Successful endpoint creation" containerID=20a2ba388e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2976 identity=20183 ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.70 49be453b-aec5-44a5-9619-013623a1ab60 default }" containerID=492628694d9ec503504131540d39a87f062fdf7e2dc4b7b7c29f048ed27e8271 datapathConfiguration="&{false false false false false }" interface=lxc7b44b68538d0 k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=492628694d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=492628694d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.control-plane:controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capi-kubeadm-control-plane-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager;k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=492628694d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=39052 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=492628694d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=39052 ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=492628694d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2365 identity=39052 ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=endpoint level=info msg="Successful endpoint creation" containerID=492628694d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2365 identity=39052 ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 5550e757-c30f-4f89-9c1f-59be3e3ceccb default }" containerID=143b84544a5c788aa4b5ca0e9c1fddfa01adc7ee834a203de4d29402b48b8b9e datapathConfiguration="&{false false false false false }" interface=lxc0f7cc81b222a k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=143b84544a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=143b84544a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider:infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io: k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce:restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn:restricted]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:cluster.x-k8s.io/provider=infrastructure-openstack;k8s:control-plane=capo-controller-manager;k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack;k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io=;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted;k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=capo-manager;k8s:io.kubernetes.pod.namespace=capo-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=143b84544a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=13668 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=143b84544a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=13668 ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=143b84544a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2875 identity=13668 ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 subsys=endpoint level=info msg="Successful endpoint creation" containerID=143b84544a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2875 identity=13668 ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 60a24ce6-62dd-4068-8102-1a65e9752e88 default }" containerID=c29cbf49e87a1ac4db42eb59430d5a47489e845653049267901d1df5be6f06bb datapathConfiguration="&{false false false false false }" interface=lxc3348f4a8eddd k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c29cbf49e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.125 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c29cbf49e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.125 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c29cbf49e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=20183 identityLabels="k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system" ipv4=10.0.0.125 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c29cbf49e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=20183 ipv4=10.0.0.125 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c29cbf49e8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=541 identity=20183 ipv4=10.0.0.125 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c29cbf49e8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=541 identity=20183 ipv4=10.0.0.125 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-67b8b974d6-k68xp subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20a2ba388e endpointID=2976 k8sNamespace=capi-kubeadm-bootstrap-system k8sPodName=capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=bootstrap-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-bootstrap-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-bootstrap-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-bootstrap-system]" subsys=allocator level=info msg="Removed endpoint" containerID=20a2ba388e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2976 identity=20183 ipv4=10.0.0.6 ipv6= k8sPodName=capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager-6f6766ffcc-lh5lt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 fe1ac742-5ea5-496f-a8ce-20931775339f default }" containerID=b6e442d942acc8cf75132a70cc22e68160f915048e094d60f48d122a8e9c0b43 datapathConfiguration="&{false false false false false }" interface=lxcf02b7bdd382c k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6e442d942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 ipv4=10.0.0.30 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6e442d942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.30 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b6e442d942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=39052 identityLabels="k8s:cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager,k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system" ipv4=10.0.0.30 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6e442d942 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=39052 ipv4=10.0.0.30 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6e442d942 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1007 identity=39052 ipv4=10.0.0.30 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6e442d942 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1007 identity=39052 ipv4=10.0.0.30 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-6b6ccbf6b8-zzs9d subsys=daemon level=info msg="Delete endpoint request" containerID=492628694d endpointID=2365 k8sNamespace=capi-kubeadm-control-plane-system k8sPodName=capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=control-plane-kubeadm k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=control-plane-kubeadm k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-kubeadm-control-plane-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-kubeadm-control-plane-manager k8s:io.kubernetes.pod.namespace=capi-kubeadm-control-plane-system]" subsys=allocator level=info msg="Removed endpoint" containerID=492628694d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2365 identity=39052 ipv4=10.0.0.70 ipv6= k8sPodName=capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager-7db57f6cd7-n2hqh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 d01397d0-e658-4c80-9fc5-fa872e094b01 default }" containerID=1b14d99cee546731b8fa1ad7bc3f51b602072719f5952082ec91b5908015fab8 datapathConfiguration="&{false false false false false }" interface=lxc86b8beea27fb k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b14d99cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b14d99cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1b14d99cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=15340 identityLabels="k8s:cluster.x-k8s.io/provider=cluster-api,k8s:control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capi-manager,k8s:io.kubernetes.pod.namespace=capi-system" ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b14d99cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=15340 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b14d99cee datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1859 identity=15340 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b14d99cee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1859 identity=15340 ipv4=10.0.0.67 ipv6= k8sPodName=capi-system/capi-controller-manager-5647546676-tbwc7 subsys=daemon level=info msg="Delete endpoint request" containerID=6929b20fb6 endpointID=3439 k8sNamespace=capi-system k8sPodName=capi-controller-manager-69f9d56d75-k7pt6 subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=cluster-api k8s:control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=cluster-api k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.control-plane=controller-manager k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capi-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capi-manager k8s:io.kubernetes.pod.namespace=capi-system]" subsys=allocator level=info msg="Removed endpoint" containerID=6929b20fb6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3439 identity=15340 ipv4=10.0.0.166 ipv6= k8sPodName=capi-system/capi-controller-manager-69f9d56d75-k7pt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 43353a33-af10-40da-b79e-f59f341b1d97 default }" containerID=695b09ef15e7cecb623062751166fe0fe9e140f1d04a8f8afb6fed1fa017208b datapathConfiguration="&{false false false false false }" interface=lxcea91c0bce55b k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=695b09ef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=695b09ef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=695b09ef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=13668 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=695b09ef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=13668 ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=695b09ef15 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1911 identity=13668 ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=695b09ef15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1911 identity=13668 ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc subsys=daemon level=info msg="Delete endpoint request" containerID=143b84544a endpointID=2875 k8sNamespace=capo-system k8sPodName=capo-controller-manager-8c5df4f-vw242 subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=143b84544a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2875 identity=13668 ipv4=10.0.0.69 ipv6= k8sPodName=capo-system/capo-controller-manager-8c5df4f-vw242 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 d2ccea9a-90ea-4820-83a6-38dba3cbaf96 default }" containerID=2aa6072491ef3ab930ca7a957bad9af61655e1798d448967186908cf9bfb472e datapathConfiguration="&{false false false false false }" interface=lxc43a20225497f k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2aa6072491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.223 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2aa6072491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.223 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2aa6072491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=13668 identityLabels="k8s:cluster.x-k8s.io/provider=infrastructure-openstack,k8s:control-plane=capo-controller-manager,k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack,k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted,k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=capo-manager,k8s:io.kubernetes.pod.namespace=capo-system" ipv4=10.0.0.223 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2aa6072491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=13668 ipv4=10.0.0.223 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2aa6072491 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=660 identity=13668 ipv4=10.0.0.223 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2aa6072491 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=660 identity=13668 ipv4=10.0.0.223 ipv6= k8sPodName=capo-system/capo-controller-manager-56cf844ccd-dk6nd subsys=daemon level=info msg="Delete endpoint request" containerID=695b09ef15 endpointID=1911 k8sNamespace=capo-system k8sPodName=capo-controller-manager-6f649456cd-l4xsc subsys=daemon level=info msg="Releasing key" key="[k8s:cluster.x-k8s.io/provider=infrastructure-openstack k8s:control-plane=capo-controller-manager k8s:io.cilium.k8s.namespace.labels.cluster.x-k8s.io/provider=infrastructure-openstack k8s:io.cilium.k8s.namespace.labels.clusterctl.cluster.x-k8s.io k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=capo-system k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/audit=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/enforce=restricted k8s:io.cilium.k8s.namespace.labels.pod-security.kubernetes.io/warn=restricted k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=capo-manager k8s:io.kubernetes.pod.namespace=capo-system]" subsys=allocator level=info msg="Removed endpoint" containerID=695b09ef15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1911 identity=13668 ipv4=10.0.0.123 ipv6= k8sPodName=capo-system/capo-controller-manager-6f649456cd-l4xsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 85e47aac-0e41-4da5-ba5b-e227a465fc9a default }" containerID=f02ea0667dd484816e65785cab9528f3b436c56bad1f89324ec6543b63c5b7a7 datapathConfiguration="&{false false false false false }" interface=lxc7bbe546a100d k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f02ea0667d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f02ea0667d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f02ea0667d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f02ea0667d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=61541 identityLabels="k8s:application=magnum,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f02ea0667d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=61541 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 3bceab83-40a7-401f-b441-3688583b01b4 default }" containerID=fbeed861bd546c413644cf14569c7d74aa7188c4cdacf70b8820272a3d32db11 datapathConfiguration="&{false false false false false }" interface=lxc513406c18ea1 k8sPodName=openstack/magnum-conductor-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbeed861bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 954e8610-0e51-4561-97f2-df209e567a8f default }" containerID=da4ef00f231fa29f52ea2791127aa9d994744bcc56f405ef3d55c88b92432c4b datapathConfiguration="&{false false false false false }" interface=lxcb8e6695bb911 k8sPodName=openstack/magnum-db-init-kxhrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da4ef00f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbeed861bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=da4ef00f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:apps.kubernetes.io/pod-index=0;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=magnum;k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbeed861bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=28773 identityLabels="k8s:application=magnum,k8s:apps.kubernetes.io/pod-index=0,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=magnum,k8s:statefulset.kubernetes.io/pod-name=magnum-conductor-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/magnum-conductor-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=fbeed861bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=28773 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd;k8s:batch.kubernetes.io/job-name=magnum-db-init;k8s:component=db-init;k8s:controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da4ef00f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identity=45975 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd,k8s:batch.kubernetes.io/job-name=magnum-db-init,k8s:component=db-init,k8s:controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-init,k8s:release_group=magnum" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da4ef00f23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identity=45975 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f02ea0667d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2585 identity=61541 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f02ea0667d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2585 identity=61541 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/magnum-api-6fbbf95f4-gz7qh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fbeed861bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=731 identity=28773 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbeed861bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=731 identity=28773 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/magnum-conductor-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da4ef00f23 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3683 identity=45975 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=da4ef00f23 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3683 identity=45975 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da4ef00f23 endpointID=3683 k8sNamespace=openstack k8sPodName=magnum-db-init-kxhrc subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd k8s:batch.kubernetes.io/job-name=magnum-db-init k8s:component=db-init k8s:controller-uid=648785da-ff06-4b02-9149-c2d3d89b1edd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=da4ef00f23 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3683 identity=45975 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/magnum-db-init-kxhrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 886f3f38-315f-4ebc-9657-3553119a8f82 default }" containerID=d214076e470a0d10ba79f4d323ff289a81e8d70f71c789e5f63a8e9c56f72044 datapathConfiguration="&{false false false false false }" interface=lxce982fd52189a k8sPodName=openstack/magnum-db-sync-4j564 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d214076e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d214076e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=236358e3-86d8-4509-9c03-41df24346bf6,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=236358e3-86d8-4509-9c03-41df24346bf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=236358e3-86d8-4509-9c03-41df24346bf6;k8s:batch.kubernetes.io/job-name=magnum-db-sync;k8s:component=db-sync;k8s:controller-uid=236358e3-86d8-4509-9c03-41df24346bf6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-db-sync;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d214076e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identity=4272 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=236358e3-86d8-4509-9c03-41df24346bf6,k8s:batch.kubernetes.io/job-name=magnum-db-sync,k8s:component=db-sync,k8s:controller-uid=236358e3-86d8-4509-9c03-41df24346bf6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-db-sync,k8s:release_group=magnum" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d214076e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1953 identity=4272 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d214076e47 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1953 identity=4272 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d214076e47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1953 identity=4272 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 601e922c-87a2-4261-9c2d-1d51cea5cc32 default }" containerID=fd05d5b85aac869e08f456cfdea8f4b9b7dd75b76e2cdc1b795342fa7e178ad8 datapathConfiguration="&{false false false false false }" interface=lxc4324a946835e k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd05d5b85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd05d5b85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757485,k8s:component=volume-usage-audit,k8s:controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29757485,k8s:release_group=cinder" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=cinder;k8s:batch.kubernetes.io/controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a;k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757485;k8s:component=volume-usage-audit;k8s:controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=cinder-volume-usage-audit-29757485;k8s:release_group=cinder;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd05d5b85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=4020 identityLabels="k8s:application=cinder,k8s:batch.kubernetes.io/controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a,k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757485,k8s:component=volume-usage-audit,k8s:controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=cinder-volume-usage-audit-29757485,k8s:release_group=cinder" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd05d5b85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=4020 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 049bd0a4-0c5f-4b82-88ca-e763ae107c4e default }" containerID=ed313601b6036e60d960af305a6bcc8f91e3a56c4d3881bd0d338c351cd8cf97 datapathConfiguration="&{false false false false false }" interface=lxcd2d5f597954d k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed313601b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed313601b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757485,k8s:component=engine-cleaner,k8s:controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757485,k8s:release_group=heat" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757485;k8s:component=engine-cleaner;k8s:controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757485;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed313601b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=15356 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757485,k8s:component=engine-cleaner,k8s:controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757485,k8s:release_group=heat" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed313601b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=15356 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd05d5b85a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=127 identity=4020 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd05d5b85a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=127 identity=4020 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed313601b6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=391 identity=15356 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed313601b6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=391 identity=15356 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed313601b6 endpointID=391 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757485-j6bfp subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757485 k8s:component=engine-cleaner k8s:controller-uid=706a2fd0-2297-4abd-9287-efbe18c0f6f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757485 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=ed313601b6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=391 identity=15356 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757485-j6bfp subsys=endpoint level=info msg="Delete endpoint request" containerID=fd05d5b85a endpointID=127 k8sNamespace=openstack k8sPodName=cinder-volume-usage-audit-29757485-hw2wz subsys=daemon level=info msg="Releasing key" key="[k8s:application=cinder k8s:batch.kubernetes.io/controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a k8s:batch.kubernetes.io/job-name=cinder-volume-usage-audit-29757485 k8s:component=volume-usage-audit k8s:controller-uid=1324815c-482d-4b0c-b47e-4a68aef4285a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cinder-volume-usage-audit k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=cinder-volume-usage-audit-29757485 k8s:release_group=cinder]" subsys=allocator level=info msg="Removed endpoint" containerID=fd05d5b85a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=127 identity=4020 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/cinder-volume-usage-audit-29757485-hw2wz subsys=endpoint level=info msg="Delete endpoint request" containerID=d214076e47 endpointID=1953 k8sNamespace=openstack k8sPodName=magnum-db-sync-4j564 subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=236358e3-86d8-4509-9c03-41df24346bf6 k8s:batch.kubernetes.io/job-name=magnum-db-sync k8s:component=db-sync k8s:controller-uid=236358e3-86d8-4509-9c03-41df24346bf6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-db-sync k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=d214076e47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1953 identity=4272 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/magnum-db-sync-4j564 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 6162a698-8ee3-4274-990c-c705597d9f48 default }" containerID=7d44bfce426c9e29075f6f2eb817f40622652754bef65bfdd71d31e64292bea4 datapathConfiguration="&{false false false false false }" interface=lxc0969b63aa303 k8sPodName=openstack/magnum-rabbit-init-kjpqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d44bfce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d44bfce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=dd33c676-0308-47bb-a619-95450b410092,k8s:batch.kubernetes.io/job-name=magnum-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=dd33c676-0308-47bb-a619-95450b410092,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-rabbit-init,k8s:release_group=magnum" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=dd33c676-0308-47bb-a619-95450b410092;k8s:batch.kubernetes.io/job-name=magnum-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=dd33c676-0308-47bb-a619-95450b410092;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-rabbit-init;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d44bfce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=33136 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=dd33c676-0308-47bb-a619-95450b410092,k8s:batch.kubernetes.io/job-name=magnum-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=dd33c676-0308-47bb-a619-95450b410092,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-rabbit-init,k8s:release_group=magnum" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d44bfce42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=33136 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d44bfce42 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=376 identity=33136 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d44bfce42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=376 identity=33136 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d44bfce42 endpointID=376 k8sNamespace=openstack k8sPodName=magnum-rabbit-init-kjpqv subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=dd33c676-0308-47bb-a619-95450b410092 k8s:batch.kubernetes.io/job-name=magnum-rabbit-init k8s:component=rabbit-init k8s:controller-uid=dd33c676-0308-47bb-a619-95450b410092 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-rabbit-init k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=7d44bfce42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=376 identity=33136 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/magnum-rabbit-init-kjpqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 b8c34fca-41ad-49b5-9675-2729c6ee965f default }" containerID=190cb9ec40b8449ec6862e4c0c064925b00b65e3c97bcdaa7ee9d5306b6176c2 datapathConfiguration="&{false false false false false }" interface=lxc820c27ebe71e k8sPodName=openstack/magnum-ks-service-4nrfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=190cb9ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=190cb9ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=a7958262-436e-42db-b47e-2a8503edda86,k8s:batch.kubernetes.io/job-name=magnum-ks-service,k8s:component=ks-service,k8s:controller-uid=a7958262-436e-42db-b47e-2a8503edda86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-service,k8s:release_group=magnum" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=a7958262-436e-42db-b47e-2a8503edda86;k8s:batch.kubernetes.io/job-name=magnum-ks-service;k8s:component=ks-service;k8s:controller-uid=a7958262-436e-42db-b47e-2a8503edda86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-service;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=190cb9ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=18499 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=a7958262-436e-42db-b47e-2a8503edda86,k8s:batch.kubernetes.io/job-name=magnum-ks-service,k8s:component=ks-service,k8s:controller-uid=a7958262-436e-42db-b47e-2a8503edda86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-service,k8s:release_group=magnum" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=190cb9ec40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=18499 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=190cb9ec40 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1840 identity=18499 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=190cb9ec40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1840 identity=18499 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=190cb9ec40 endpointID=1840 k8sNamespace=openstack k8sPodName=magnum-ks-service-4nrfm subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=a7958262-436e-42db-b47e-2a8503edda86 k8s:batch.kubernetes.io/job-name=magnum-ks-service k8s:component=ks-service k8s:controller-uid=a7958262-436e-42db-b47e-2a8503edda86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-service k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=190cb9ec40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1840 identity=18499 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/magnum-ks-service-4nrfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 28a39ad3-72a4-47ee-9c30-0d751f16c7ef default }" containerID=40917128cd51991b76eb5d7ac9f10fda671204780b6f5e09a9984176a8c2ade9 datapathConfiguration="&{false false false false false }" interface=lxc2c0d7caa24a6 k8sPodName=openstack/magnum-ks-endpoints-67g7p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40917128cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40917128cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f,k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-endpoints,k8s:release_group=magnum" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f;k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-endpoints;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40917128cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=2579 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f,k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-endpoints,k8s:release_group=magnum" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40917128cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=2579 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40917128cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1991 identity=2579 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=40917128cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1991 identity=2579 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40917128cd endpointID=1991 k8sNamespace=openstack k8sPodName=magnum-ks-endpoints-67g7p subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f k8s:batch.kubernetes.io/job-name=magnum-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2dad0fe7-adb4-4a33-a73f-47c2c251463f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-endpoints k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=40917128cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1991 identity=2579 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/magnum-ks-endpoints-67g7p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 82b2a192-6a9e-4429-87fe-21cea6aa600a default }" containerID=00804871b41c32136bb97dd5815be6950270a8cf1520eb80efea745259adf207 datapathConfiguration="&{false false false false false }" interface=lxc2a83614a6540 k8sPodName=openstack/magnum-ks-user-4rrtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00804871b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00804871b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6,k8s:batch.kubernetes.io/job-name=magnum-ks-user,k8s:component=ks-user,k8s:controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-user,k8s:release_group=magnum" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00804871b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6;k8s:batch.kubernetes.io/job-name=magnum-ks-user;k8s:component=ks-user;k8s:controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-ks-user;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00804871b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 identity=44658 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6,k8s:batch.kubernetes.io/job-name=magnum-ks-user,k8s:component=ks-user,k8s:controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-ks-user,k8s:release_group=magnum" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00804871b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 identity=44658 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00804871b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3292 identity=44658 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=00804871b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3292 identity=44658 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00804871b4 endpointID=3292 k8sNamespace=openstack k8sPodName=magnum-ks-user-4rrtk subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6 k8s:batch.kubernetes.io/job-name=magnum-ks-user k8s:component=ks-user k8s:controller-uid=4468b577-0252-49a4-8c24-9b3620a589b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-ks-user k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=00804871b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3292 identity=44658 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/magnum-ks-user-4rrtk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 1cd13d3d-cce1-450d-b6cb-8879f2c0027d default }" containerID=e4c890e9b40fbefe1036c97d9f4f4bd7490bc6b2c6af5b7997849771e0271920 datapathConfiguration="&{false false false false false }" interface=lxc565fbd6580dd k8sPodName=openstack/magnum-domain-ks-user-9tgz6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4c890e9b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4c890e9b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8,k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-domain-ks-user,k8s:release_group=magnum" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:batch.kubernetes.io/controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8;k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=magnum-domain-ks-user;k8s:release_group=magnum;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4c890e9b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=15464 identityLabels="k8s:application=magnum,k8s:batch.kubernetes.io/controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8,k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=magnum-domain-ks-user,k8s:release_group=magnum" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4c890e9b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4c890e9b4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2020 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4c890e9b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2020 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4c890e9b4 endpointID=2020 k8sNamespace=openstack k8sPodName=magnum-domain-ks-user-9tgz6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=magnum k8s:batch.kubernetes.io/controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8 k8s:batch.kubernetes.io/job-name=magnum-domain-ks-user k8s:component=ks-user k8s:controller-uid=422d9a02-141d-4ea4-ae54-c4d727944ea8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=magnum-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=magnum-domain-ks-user k8s:release_group=magnum]" subsys=allocator level=info msg="Removed endpoint" containerID=e4c890e9b4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2020 identity=15464 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/magnum-domain-ks-user-9tgz6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 8d13f6ba-dc4b-434a-b488-43b1411e3aed default }" containerID=839d42b5bb432cfedc9ff75f8cfdcd00e10882f010c83fcbfabaf522a9081182 datapathConfiguration="&{false false false false false }" interface=lxc77ace91ea5ab k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=839d42b5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=839d42b5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:application=magnum,k8s:component=cluster-api-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=cluster-api-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=839d42b5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=64484 identityLabels="k8s:application=magnum,k8s:component=cluster-api-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=magnum-conductor,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=839d42b5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=64484 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=839d42b5bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=547 identity=64484 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=839d42b5bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=547 identity=64484 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/magnum-cluster-api-proxy-2rdfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 e28728cf-0982-4c3b-80fe-d5cd0e9f737e default }" containerID=670b669669caa27b3548e0340bd0771073e958a2b2fd717101396df94a02fd3f datapathConfiguration="&{false false false false false }" interface=lxc3d5eba6d6e3b k8sPodName=openstack/magnum-registry-c45778976-cc4kf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=670b669669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cc4kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=670b669669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identityLabels="k8s:application=magnum,k8s:component=registry,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cc4kf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=magnum;k8s:component=registry;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=670b669669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=26366 identityLabels="k8s:application=magnum,k8s:component=registry,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cc4kf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=670b669669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=26366 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cc4kf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=670b669669 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=971 identity=26366 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cc4kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=670b669669 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=971 identity=26366 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/magnum-registry-c45778976-cc4kf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 3cbb80a7-76cc-4fe8-8218-6ea01d5e8e3d default }" containerID=a60c5f7cda5b459b260803736bda28a3818e44a79bfd903d2745a6b3d2dd8d6e datapathConfiguration="&{false false false false false }" interface=lxc5e9975083ad8 k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a60c5f7cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a60c5f7cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757490,k8s:component=engine-cleaner,k8s:controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757490,k8s:release_group=heat" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757490;k8s:component=engine-cleaner;k8s:controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757490;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a60c5f7cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identity=56194 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757490,k8s:component=engine-cleaner,k8s:controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757490,k8s:release_group=heat" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a60c5f7cda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identity=56194 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a60c5f7cda datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2664 identity=56194 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=a60c5f7cda datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2664 identity=56194 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a60c5f7cda endpointID=2664 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757490-mzc8g subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757490 k8s:component=engine-cleaner k8s:controller-uid=1891b1fa-80b0-44b4-a0a8-9aec650148a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757490 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a60c5f7cda datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2664 identity=56194 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757490-mzc8g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 236ac630-bbdd-4c84-8d43-66181920e19a default }" containerID=6b7fa7e7b11113e9ead5a28a873e23b69bbd3352451080678875d9df39093ca0 datapathConfiguration="&{false false false false false }" interface=lxc63c8c56d4ddf k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b7fa7e7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b7fa7e7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757495,k8s:component=engine-cleaner,k8s:controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757495,k8s:release_group=heat" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757495;k8s:component=engine-cleaner;k8s:controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757495;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b7fa7e7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=3633 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757495,k8s:component=engine-cleaner,k8s:controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757495,k8s:release_group=heat" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b7fa7e7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=3633 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b7fa7e7b1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=119 identity=3633 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b7fa7e7b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=119 identity=3633 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b7fa7e7b1 endpointID=119 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757495-rw55f subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757495 k8s:component=engine-cleaner k8s:controller-uid=178b2e5b-d412-4345-a5fd-5bf7140a3428 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757495 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=6b7fa7e7b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=119 identity=3633 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757495-rw55f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 ed2901e6-1f87-461b-9ff4-808aac8820d9 default }" containerID=0b64570f18178753de2d7bd0fefb4a433e95b3348f0c8735127bfcb061a3b137 datapathConfiguration="&{false false false false false }" interface=lxc8b5795d61b47 k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b64570f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b64570f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757500,k8s:component=engine-cleaner,k8s:controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757500,k8s:release_group=heat" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757500;k8s:component=engine-cleaner;k8s:controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757500;k8s:release_group=heat;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0b64570f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=64955 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757500,k8s:component=engine-cleaner,k8s:controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757500,k8s:release_group=heat" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b64570f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=64955 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b64570f18 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=28 identity=64955 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b64570f18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=28 identity=64955 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b64570f18 endpointID=28 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757500-6r4nr subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757500 k8s:component=engine-cleaner k8s:controller-uid=4dc5cf7a-f1cd-497a-b914-062765cfd8f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757500 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=0b64570f18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=28 identity=64955 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757500-6r4nr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 00c06d27-3103-4ac5-97ad-bf025a58ee14 default }" containerID=aea34ff315b1cf0dcf5acf04c457de7ce7d4d09734c9d29d37f91b6b1db2ee2b datapathConfiguration="&{false false false false false }" interface=lxcaac5eff25603 k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aea34ff315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aea34ff315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757505,k8s:component=engine-cleaner,k8s:controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757505,k8s:release_group=heat" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757505;k8s:component=engine-cleaner;k8s:controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757505;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aea34ff315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=53937 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757505,k8s:component=engine-cleaner,k8s:controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757505,k8s:release_group=heat" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aea34ff315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=53937 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aea34ff315 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1484 identity=53937 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aea34ff315 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1484 identity=53937 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aea34ff315 endpointID=1484 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757505-hv5w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757505 k8s:component=engine-cleaner k8s:controller-uid=28ba159e-20f2-4e64-8160-e25597df85bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757505 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=aea34ff315 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1484 identity=53937 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757505-hv5w2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager