level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="971.65µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.272µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="948.31µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.2µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=105.476059ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.54µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.091µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.282µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="77.172µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="86.642µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="366.092µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.44µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.250503ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.138627ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="44.302µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="42.512µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="469.034µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="120.604µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="89.912µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.316101ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="99.533µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.061µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.951µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.219.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.48891ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.621µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.572565ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="16.351µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.926532ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.161µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.091µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.041µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.89µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="48.181µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="302.689µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.25µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="245.507µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="835.535µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.146465ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.41µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.111µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.219 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.219 ipAddr.ipv6="" k8sNodeIP=199.19.213.219 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.219" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.194" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.219" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.219} {CiliumInternalIP 10.0.0.194}] 10.0.0.0/24 [] [] 10.0.0.36 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45697" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.458503798s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="26.921µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="8.1µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="108.473µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="30.581µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3089 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.558288482s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=348.149768ms file-path=/var/run/cilium/state/templates/b175a4d355ce0be01f291d5c8b531193129d7def8ec6eddb8f6044fa5057fb1a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3089 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 b16b6bb5-f0f7-422a-84c3-675c6b3edd70 default }" containerID=4af2cabb4ae513fdc26a01f97be968bd56737099fa422507ab927f8fe1c0f412 datapathConfiguration="&{false false false false false }" interface=lxc79f50441d0ba k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.66 4b75c5b8-f786-48c5-a2e4-cbd214b31e55 default }" containerID=0f632867cd660c780a01ddbedcea334d6b9c34542514590f9d02d785a004a60c datapathConfiguration="&{false false false false false }" interface=lxc5a7ba28af647 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4af2cabb4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 subsys=endpoint level=info msg="New endpoint" containerID=0f632867cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4af2cabb4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=0f632867cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0f632867cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4af2cabb4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=4af2cabb4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=6445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4af2cabb4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=6445 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f632867cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identity=14228 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f632867cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identity=14228 ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.36 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="reserved:health" ipv4=10.0.0.36 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=4 identityLabels="reserved:health" ipv4=10.0.0.36 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.160783031s file-path=/var/run/cilium/state/templates/b0f1a2a4c326f81a85491224618bd0cc0365db488ee0e1bc162b5f861e42cae6/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=4af2cabb4a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1777 identity=6445 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4af2cabb4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1777 identity=6445 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=433 identity=4 ipv4=10.0.0.36 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=0f632867cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3866 identity=14228 ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f632867cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3866 identity=14228 ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f632867cd endpointID=3866 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-kl4rx subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=69cfc2ae-dfcf-438e-a173-e73a5f398df4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=0f632867cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3866 identity=14228 ipv4=10.0.0.66 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kl4rx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 8288d333-c64d-4a0c-a522-efd13c3a3f22 default }" containerID=ccddfa3dfd93764e3942f006ed79097ab11f138991fbbdccfb2eb957012667d3 datapathConfiguration="&{false false false false false }" interface=lxcb347cd3780a4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccddfa3dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccddfa3dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ccddfa3dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ccddfa3dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=5735 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccddfa3dfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=5735 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccddfa3dfd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2360 identity=5735 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccddfa3dfd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2360 identity=5735 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-mq2rx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3089 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03089 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03089 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03089 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03089:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3089 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 4b7319d7-a68f-46d7-8d9e-985f5c4adf7a default }" containerID=b0dcfbffc56920194e6fb64bf203f20778bb7d15c614a02d2e2d5bf29995cd12 datapathConfiguration="&{false false false false false }" interface=lxcff94ff5aba49 k8sPodName=kube-system/coredns-67659f764b-9hn99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0dcfbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-9hn99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0dcfbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-9hn99 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b0dcfbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=6445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-9hn99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0dcfbffc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=6445 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-9hn99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 3bd43f15-00df-4ad8-b909-9cf17e0871d1 default }" containerID=36d76ca66cf916844750318d8f21442e972294e5fe958383ee2a894656f261a7 datapathConfiguration="&{false false false false false }" interface=lxce532cdf78451 k8sPodName=kube-system/coredns-67659f764b-khnsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36d76ca66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-khnsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36d76ca66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-khnsm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=36d76ca66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identity=6445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-khnsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36d76ca66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identity=6445 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-khnsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0dcfbffc5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=46 identity=6445 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-9hn99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0dcfbffc5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=46 identity=6445 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-9hn99 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=36d76ca66c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1419 identity=6445 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-khnsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=36d76ca66c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1419 identity=6445 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-khnsm subsys=daemon level=info msg="Delete endpoint request" containerID=4af2cabb4a endpointID=1777 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-d8kc2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=4af2cabb4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1777 identity=6445 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d8kc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 07d5ad5b-3d46-40cc-a77e-984cda6b29e9 default }" containerID=a569a238fe6ef0f5b9e71f56e3b838fca96ff8f3543aacb6b3f644197cf40096 datapathConfiguration="&{false false false false false }" interface=lxc026d9e66ea1a k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a569a238fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a569a238fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-csi-rbd;k8s:chart=ceph-csi-rbd-3.11.0;k8s:component=provisioner;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner;k8s:io.kubernetes.pod.namespace=kube-system;k8s:release=ceph-csi-rbd;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a569a238fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=18635 identityLabels="k8s:app=ceph-csi-rbd,k8s:chart=ceph-csi-rbd-3.11.0,k8s:component=provisioner,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ceph-csi-rbd-provisioner,k8s:io.kubernetes.pod.namespace=kube-system,k8s:release=ceph-csi-rbd" ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a569a238fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=18635 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a569a238fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=680 identity=18635 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=a569a238fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=680 identity=18635 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/ceph-csi-rbd-provisioner-69cb97fb6-dmk8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 770f312c-05db-466a-87ab-b9741806587d default }" containerID=c4e8eb5cf9685fc0d076e14ca0b03b9a2e3f3e6e0d4116de87fd480a4cd2d1b0 datapathConfiguration="&{false false false false false }" interface=lxca59136acbcdb k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4e8eb5cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4e8eb5cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0c423504-eed6-449d-91da-4e2813de2187,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0c423504-eed6-449d-91da-4e2813de2187,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=0c423504-eed6-449d-91da-4e2813de2187;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=0c423504-eed6-449d-91da-4e2813de2187;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4e8eb5cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=5278 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=0c423504-eed6-449d-91da-4e2813de2187,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=0c423504-eed6-449d-91da-4e2813de2187,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4e8eb5cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=5278 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4e8eb5cf9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2204 identity=5278 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4e8eb5cf9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2204 identity=5278 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.54 09d6dece-9585-4fa5-8e85-4cbec3b7a638 default }" containerID=c122b4ed45b16a47ccb1ace10410b60d0b85d7d6d19b26a7fd013ec735364a1d datapathConfiguration="&{false false false false false }" interface=lxc999b25f7b281 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c122b4ed45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.54 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c122b4ed45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.54 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c122b4ed45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=301 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.54 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c122b4ed45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=301 ipv4=10.0.0.54 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 9e8153c3-f3ea-42f3-a6db-9b26b18f1c5a default }" containerID=32f20c67324dd30d7138ca21a6f6b0ec297d77a0e362bcc0fa6825b3a4c1ff56 datapathConfiguration="&{false false false false false }" interface=lxc7e2c015a960f k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32f20c6732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32f20c6732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32f20c6732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=59405 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32f20c6732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2891 identity=59405 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 0f73e7e1-674e-43eb-9b5e-f86fcd24c8c0 default }" containerID=4313d6620aeb85d2fb2d756d012e0df6c6f9e1eb291c9e7a60da4c4b2c909a78 datapathConfiguration="&{false false false false false }" interface=lxc4d71b781fa38 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4313d6620a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4313d6620a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4313d6620a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=62878 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4313d6620a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=62878 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c122b4ed45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=25 identity=301 ipv4=10.0.0.54 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c122b4ed45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=25 identity=301 ipv4=10.0.0.54 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-gw8v8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=32f20c6732 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2891 identity=59405 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=32f20c6732 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2891 identity=59405 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-bfw6r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4313d6620a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1128 identity=62878 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4313d6620a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1128 identity=62878 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jmmmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4e8eb5cf9 endpointID=2204 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-pnb54 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=0c423504-eed6-449d-91da-4e2813de2187 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=0c423504-eed6-449d-91da-4e2813de2187 k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c4e8eb5cf9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2204 identity=5278 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pnb54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 4f1afcf4-7457-46ef-8d81-b370877c90e4 default }" containerID=08dabbfff8ac6a4a148fb724c61b4345edbf4eb73f4a8fca3c84a3fe5cc20c9a datapathConfiguration="&{false false false false false }" interface=lxc61f133f9ab2e k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08dabbfff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08dabbfff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08dabbfff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identity=21333 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08dabbfff8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identity=21333 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08dabbfff8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1774 identity=21333 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=08dabbfff8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1774 identity=21333 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08dabbfff8 endpointID=1774 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xmmsn subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=2d6473fc-2a40-4117-a5c2-416ca5813e32 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=08dabbfff8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1774 identity=21333 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xmmsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 d8b4db4c-ac1f-414f-a840-3e848d5f6c34 default }" containerID=8750972928b2f93059b47dc6f609cabf82b75bf42c1920636edd361e419474cc datapathConfiguration="&{false false false false false }" interface=lxc91d80bcff992 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8750972928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8750972928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8750972928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=23611 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8750972928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=23611 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8750972928 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=244 identity=23611 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8750972928 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=244 identity=23611 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mq8rv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 a3fb4757-4824-44de-9408-a474f610bd8a default }" containerID=5cdd8a76f4b017e0aa119cbd15420f8df17dbb65ea37599eb9ef789571fe1d82 datapathConfiguration="&{false false false false false }" interface=lxc4a417a5945fc k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cdd8a76f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cdd8a76f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cdd8a76f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=7208 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cdd8a76f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1477 identity=7208 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cdd8a76f4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1477 identity=7208 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cdd8a76f4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1477 identity=7208 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5cdd8a76f4 endpointID=1477 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-lpp4f subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=229e3f2f-0617-4900-b306-4c9a95ba1259 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5cdd8a76f4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1477 identity=7208 ipv4=10.0.0.67 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lpp4f subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2a7e7b6f-e03e-42a8-ba62-9acfba9fe35d] Description:}]" policyAddRequest=bff1f102-9f44-4b25-8705-19c98e0c4cc8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bff1f102-9f44-4b25-8705-19c98e0c4cc8 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=91ddb3ae-e6c9-4424-8fbe-536657f3466a] Description:}]" policyAddRequest=464d1636-c03a-47d5-b15f-5be21e08d319 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=464d1636-c03a-47d5-b15f-5be21e08d319 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.90 100eee56-1d33-4abc-b620-9563e30ae304 default }" containerID=15ecd3ca64369aa4ca6a3e28b07be68cf4a27247872267efeb869f6e3cb82ed6 datapathConfiguration="&{false false false false false }" interface=lxc412965ee3c8f k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15ecd3ca64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15ecd3ca64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15ecd3ca64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=12512 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15ecd3ca64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=12512 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15ecd3ca64 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=107 identity=12512 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15ecd3ca64 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=107 identity=12512 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5nfd7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 e90ad8e2-b030-43c7-b8b1-8015060f2877 default }" containerID=fa125e1264c8f5d697959104ef49859f7ca2c017bfcf324d18c483462ca560c3 datapathConfiguration="&{false false false false false }" interface=lxcc318f0041ab9 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa125e1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa125e1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa125e1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=34858 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa125e1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=34858 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa125e1264 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1524 identity=34858 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa125e1264 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1524 identity=34858 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cft6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 0ba11e4d-de46-4ffc-a607-79222ebd6c4b default }" containerID=687ff5693cc6d126fda0f4925b77d1f795c5196cd869b07ddccd2f55af24678e datapathConfiguration="&{false false false false false }" interface=lxc61440713b489 k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=687ff5693c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=687ff5693c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=687ff5693c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=687ff5693c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=34612 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=687ff5693c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=34612 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=687ff5693c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1076 identity=34612 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj subsys=endpoint level=info msg="Successful endpoint creation" containerID=687ff5693c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1076 identity=34612 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-674wj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 aefba9e9-967d-49ca-8d80-6a1e46ef2702 default }" containerID=b76b190e4f6ecae4e95b395d716f7ac742d71644e8b133bf552776eeda29d62c datapathConfiguration="&{false false false false false }" interface=lxc8f5c22b0063e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b76b190e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b76b190e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b76b190e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=2912 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b76b190e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=2912 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b76b190e4f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=24 identity=2912 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b76b190e4f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=24 identity=2912 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 149c0ce8-23df-4939-9da8-9ddf7e5b49b1 default }" containerID=efe0ececc0ad2f793b19262fb64b2a9bd9d9e30a1b58e41920ad23843906703d datapathConfiguration="&{false false false false false }" interface=lxc92714d0874e0 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efe0ececc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efe0ececc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efe0ececc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=10206 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=efe0ececc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=10206 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efe0ececc0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3535 identity=10206 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efe0ececc0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3535 identity=10206 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=1a0987a5-5264-4e46-915f-18cd3fd93a22] Description:}]" policyAddRequest=d90bb82d-cd0c-454b-858a-bde056e74148 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d90bb82d-cd0c-454b-858a-bde056e74148 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.182 34c88ae9-134b-4e01-a117-2b0a4a0133c6 default }" containerID=7be07ec2216071ff81a7638f4ff1a4f010886d32a1207daff6de84f9cd341617 datapathConfiguration="&{false false false false false }" interface=lxcbdb0df05e52a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7be07ec221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7be07ec221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7be07ec221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=43874 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7be07ec221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=43874 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7be07ec221 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2030 identity=43874 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7be07ec221 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2030 identity=43874 ipv4=10.0.0.182 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.006587579639373977 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.031230132427935667 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.216 4f85eb92-7a7d-43d7-8be8-cc201067a378 default }" containerID=6e46a9dc9dc7f9792ddd9004bd57f4cd2bb05efbcebf181d5e50125e40cbac30 datapathConfiguration="&{false false false false false }" interface=lxcae70b555aa17 k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e46a9dc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e46a9dc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6e46a9dc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=23083 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e46a9dc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=23083 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e46a9dc9d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=784 identity=23083 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e46a9dc9d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=784 identity=23083 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-dqrfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 2fedf956-faaf-4fd2-8ec1-5daeef6d2b0f default }" containerID=dc78ea2026691096fb7bac300801379675adf47645c8eed38bbb950c346834e1 datapathConfiguration="&{false false false false false }" interface=lxc0558dcfefb0e k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc78ea2026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc78ea2026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=dc78ea2026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=4523 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc78ea2026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=4523 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc78ea2026 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2095 identity=4523 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc78ea2026 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2095 identity=4523 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.70 e8bc8fc2-a522-479a-80a1-3c229e2073ce default }" containerID=96d1371b2ce03249d768d83daf4248a564db3d836d5f6129067ae7807ee7e5c4 datapathConfiguration="&{false false false false false }" interface=lxc4b585a43e254 k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96d1371b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96d1371b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96d1371b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96d1371b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=60753 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96d1371b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=60753 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 b3bbc3f6-c3b7-40da-a413-59e2b48ec485 default }" containerID=228af0f222a168d5894886cd353473020c4c66b35478e1cb7c052d120b7f75bc datapathConfiguration="&{false false false false false }" interface=lxc506c980dea22 k8sPodName=openstack/keystone-credential-setup-n68hw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=228af0f222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=228af0f222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c254c5e6-e209-45b2-9d77-67923392491c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c254c5e6-e209-45b2-9d77-67923392491c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c254c5e6-e209-45b2-9d77-67923392491c;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c254c5e6-e209-45b2-9d77-67923392491c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=228af0f222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=18090 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c254c5e6-e209-45b2-9d77-67923392491c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c254c5e6-e209-45b2-9d77-67923392491c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=228af0f222 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=18090 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96d1371b2c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2336 identity=60753 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96d1371b2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2336 identity=60753 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-6f87c8589c-tfbq6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=228af0f222 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=839 identity=18090 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw subsys=endpoint level=info msg="Successful endpoint creation" containerID=228af0f222 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=839 identity=18090 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=228af0f222 endpointID=839 k8sNamespace=openstack k8sPodName=keystone-credential-setup-n68hw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c254c5e6-e209-45b2-9d77-67923392491c k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c254c5e6-e209-45b2-9d77-67923392491c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=228af0f222 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=839 identity=18090 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-n68hw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 cd5e67c4-09aa-4497-893c-aca0e934423d default }" containerID=d612e165434099174d771fbc5b1b5757cf06545d16818df450ce9c92b7c51345 datapathConfiguration="&{false false false false false }" interface=lxc6c7302635e4e k8sPodName=openstack/keystone-db-init-hnqjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d612e16543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d612e16543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8dece24e-1b18-41b6-929a-6b955a496372,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8dece24e-1b18-41b6-929a-6b955a496372,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8dece24e-1b18-41b6-929a-6b955a496372;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=8dece24e-1b18-41b6-929a-6b955a496372;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d612e16543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 identity=33306 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8dece24e-1b18-41b6-929a-6b955a496372,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8dece24e-1b18-41b6-929a-6b955a496372,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d612e16543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 identity=33306 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d612e16543 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3620 identity=33306 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d612e16543 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3620 identity=33306 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm subsys=daemon level=info msg="Delete endpoint request" containerID=d612e16543 endpointID=3620 k8sNamespace=openstack k8sPodName=keystone-db-init-hnqjm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8dece24e-1b18-41b6-929a-6b955a496372 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=8dece24e-1b18-41b6-929a-6b955a496372 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d612e16543 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3620 identity=33306 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-db-init-hnqjm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 70a2d0d7-8a08-467d-a5f0-6484008cd420 default }" containerID=aff7add72bb340826e1ffdff6d8d102f5bc575031d387b2f91cb1ac3e2f2a54c datapathConfiguration="&{false false false false false }" interface=lxc1e90a5ab9c06 k8sPodName=openstack/keystone-fernet-setup-jwbg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aff7add72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aff7add72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4316151-d425-4508-98e5-95ba355e933e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e4316151-d425-4508-98e5-95ba355e933e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e4316151-d425-4508-98e5-95ba355e933e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=e4316151-d425-4508-98e5-95ba355e933e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=aff7add72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=10792 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4316151-d425-4508-98e5-95ba355e933e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=e4316151-d425-4508-98e5-95ba355e933e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aff7add72b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=10792 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aff7add72b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=45 identity=10792 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aff7add72b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=45 identity=10792 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aff7add72b endpointID=45 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-jwbg9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e4316151-d425-4508-98e5-95ba355e933e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=e4316151-d425-4508-98e5-95ba355e933e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aff7add72b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=45 identity=10792 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-jwbg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 77780477-f192-4d9a-8c41-82c1ddfffe3a default }" containerID=3c308f669360f8a0a1a2c22ae5937d3bfec787bd8927fb1cbe4f741dd154bbed datapathConfiguration="&{false false false false false }" interface=lxce27e752b2e98 k8sPodName=openstack/keystone-db-sync-rt77t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c308f6693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c308f6693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3c308f6693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3c308f6693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=24636 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c308f6693 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=24636 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c308f6693 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=645 identity=24636 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c308f6693 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=645 identity=24636 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c308f6693 endpointID=645 k8sNamespace=openstack k8sPodName=keystone-db-sync-rt77t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f56acdaa-9427-4e51-8634-d4971eb68fc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c308f6693 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=645 identity=24636 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-db-sync-rt77t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 5c686368-784d-483b-927e-00c13564387b default }" containerID=a380895ba4c26035249c78c45d7a0bcc06c6cff7cb7384b806eda398e77dc658 datapathConfiguration="&{false false false false false }" interface=lxcb68d7d6f2c27 k8sPodName=openstack/keystone-rabbit-init-cdsqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a380895ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a380895ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a380895ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 identity=58963 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a380895ba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 identity=58963 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a380895ba4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2924 identity=58963 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a380895ba4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2924 identity=58963 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a380895ba4 endpointID=2924 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-cdsqq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d265f87f-1b0c-4a03-b0b0-00f601203988 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a380895ba4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2924 identity=58963 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdsqq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 48ca9b00-1b60-453b-a53a-1c5e200066a0 default }" containerID=df5be127d74718a86439df23ebc728f8141a9c9ae117d4f1004ce5c50ec153e7 datapathConfiguration="&{false false false false false }" interface=lxcf3acf67709f8 k8sPodName=openstack/keystone-domain-manage-j6l42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df5be127d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df5be127d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=df5be127d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identity=49539 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df5be127d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3804 identity=49539 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df5be127d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3804 identity=49539 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df5be127d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3804 identity=49539 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df5be127d7 endpointID=3804 k8sNamespace=openstack k8sPodName=keystone-domain-manage-j6l42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=7f9b8f0c-d726-465a-94d1-2d94d8659cb1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=df5be127d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3804 identity=49539 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-domain-manage-j6l42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 b4daaf7e-0757-45b3-b079-ad203d4a198d default }" containerID=72629a94a3d9b91787c6384fbaa0d8f2117d353ea3ec5993cc4ffd2ec94eb3eb datapathConfiguration="&{false false false false false }" interface=lxcbbd2164db743 k8sPodName=openstack/keystone-bootstrap-h99n8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72629a94a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72629a94a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72629a94a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identity=28518 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72629a94a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3314 identity=28518 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72629a94a3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3314 identity=28518 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72629a94a3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3314 identity=28518 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72629a94a3 endpointID=3314 k8sNamespace=openstack k8sPodName=keystone-bootstrap-h99n8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=c2cb380c-97fc-46d4-9ea6-77db7e008f64 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=72629a94a3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3314 identity=28518 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/keystone-bootstrap-h99n8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 f8171053-b7e6-4ca3-8f37-66ad960ad9d5 default }" containerID=feed51736aa63813f2fbcc9f844c97d22c0f711f052b8c4bcf3bd506b17e7795 datapathConfiguration="&{false false false false false }" interface=lxc10a93c4828bc k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feed51736a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feed51736a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=feed51736a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feed51736a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=16791 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=feed51736a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=16791 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=feed51736a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=246 identity=16791 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=feed51736a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=246 identity=16791 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 eb96568c-1211-466d-87ba-d95e52a08fa3 default }" containerID=4f31797fac4a0759f063d4249382557bbe1d873cdbb691d65695fbba0a21be97 datapathConfiguration="&{false false false false false }" interface=lxc4d6f7bcc12d6 k8sPodName=openstack/glance-db-init-7hlkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f31797fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f31797fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f31797fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 identity=47222 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f31797fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2507 identity=47222 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f31797fac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2507 identity=47222 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f31797fac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2507 identity=47222 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f31797fac endpointID=2507 k8sNamespace=openstack k8sPodName=glance-db-init-7hlkn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=d7e65d9b-96a0-4b06-b2dc-84f7513122cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4f31797fac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2507 identity=47222 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-db-init-7hlkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 94dc3876-0d06-4441-be60-5d62d387fbfb default }" containerID=e956e653c39d4883563811bf5bb8ef6fc50e19074738cceefbf4f205b4c4158e datapathConfiguration="&{false false false false false }" interface=lxc516210274956 k8sPodName=openstack/glance-db-sync-9gqbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e956e653c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e956e653c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e956e653c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=32065 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e956e653c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=32065 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e956e653c3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=202 identity=32065 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e956e653c3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=32065 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e956e653c3 endpointID=202 k8sNamespace=openstack k8sPodName=glance-db-sync-9gqbv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d59d4aea-e52c-4670-a3d7-184fab465f52 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e956e653c3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=32065 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-sync-9gqbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 b4463a58-eee9-49b5-a154-efaf41f513c4 default }" containerID=d11cf701f170ed53d57c2974bc73bf8bdc2655951f91c3651b30ae8018befbb4 datapathConfiguration="&{false false false false false }" interface=lxc7f60c174707e k8sPodName=openstack/glance-rabbit-init-njb7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d11cf701f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d11cf701f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d11cf701f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=26641 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d11cf701f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=26641 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d11cf701f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1015 identity=26641 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d11cf701f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1015 identity=26641 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d11cf701f1 endpointID=1015 k8sNamespace=openstack k8sPodName=glance-rabbit-init-njb7r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=dbcf4b89-68d1-4dda-b596-0cbb2dad677e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d11cf701f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1015 identity=26641 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-rabbit-init-njb7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 79585741-0335-441d-973e-bb765dfa7565 default }" containerID=be861e7476d73fce1263b591a3072adea96aae11433401a1efc4046b1193dc1e datapathConfiguration="&{false false false false false }" interface=lxcf3524ecbe3a4 k8sPodName=openstack/glance-ks-service-mqv42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be861e7476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be861e7476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be861e7476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=6735 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be861e7476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=6735 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=be861e7476 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3099 identity=6735 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be861e7476 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3099 identity=6735 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be861e7476 endpointID=3099 k8sNamespace=openstack k8sPodName=glance-ks-service-mqv42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6028afb6-947b-4d03-a046-ea407f9d7bed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=be861e7476 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3099 identity=6735 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-mqv42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 18879d74-5ddf-4101-be0f-f429b8245c28 default }" containerID=8e8d2e2d81b7592fe4be0928c0dd7a1ce35e0780c1f8d8ecc26587332fe9f867 datapathConfiguration="&{false false false false false }" interface=lxc16f2f803d516 k8sPodName=openstack/glance-ks-endpoints-kbhjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e8d2e2d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e8d2e2d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8e8d2e2d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8e8d2e2d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=966 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e8d2e2d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=966 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e8d2e2d81 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=249 identity=966 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e8d2e2d81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=249 identity=966 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e8d2e2d81 endpointID=249 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kbhjh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=87f765d6-a169-42d9-a4a7-8c5467fa7bd9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e8d2e2d81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=249 identity=966 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-ks-endpoints-kbhjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 8a6cc5a4-f324-487b-9d7c-e3a5870fad55 default }" containerID=320110c9bc93b03efcfb1b8074b83c88c5b9be4a4fd7afa5a4d21906eff6697f datapathConfiguration="&{false false false false false }" interface=lxca6bbaeb156a0 k8sPodName=openstack/glance-ks-user-wqlc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=320110c9bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=320110c9bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=320110c9bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=320110c9bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=3941 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=320110c9bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=3941 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=320110c9bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=962 identity=3941 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=320110c9bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=962 identity=3941 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=320110c9bc endpointID=962 k8sNamespace=openstack k8sPodName=glance-ks-user-wqlc9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=156c489e-5b70-4d7f-aecf-9bd084f61a83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=320110c9bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=962 identity=3941 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/glance-ks-user-wqlc9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 65413a0a-02b6-4d53-b41e-fc1d27661d5c default }" containerID=ee844e9553af97ffd538219efb6c8f20742cfb64c981143b8832834d10fdb97a datapathConfiguration="&{false false false false false }" interface=lxccd81ac7ad1fc k8sPodName=openstack/glance-metadefs-load-7j89d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee844e9553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee844e9553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ee844e9553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ee844e9553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=5203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee844e9553 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=5203 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee844e9553 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=879 identity=5203 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee844e9553 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=879 identity=5203 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee844e9553 endpointID=879 k8sNamespace=openstack k8sPodName=glance-metadefs-load-7j89d subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=fa7df1b4-77cd-432e-85a4-9c4968c25b12 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ee844e9553 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=879 identity=5203 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-metadefs-load-7j89d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 350ad37e-5c3e-4fdf-ba3a-87cb7eb83a2f default }" containerID=bcfca1b119ce6089be02a81934722a49775a372148854df014f9f7b883fbd010 datapathConfiguration="&{false false false false false }" interface=lxc8c897e66d01d k8sPodName=openstack/glance-storage-init-kdn9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcfca1b119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcfca1b119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bcfca1b119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcfca1b119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=49120 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcfca1b119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=49120 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcfca1b119 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2641 identity=49120 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcfca1b119 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2641 identity=49120 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcfca1b119 endpointID=2641 k8sNamespace=openstack k8sPodName=glance-storage-init-kdn9c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a75f2dd3-c68c-449a-96c3-3242860b497a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bcfca1b119 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2641 identity=49120 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-kdn9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 24167a4f-d0a5-46ea-b182-95de912aa977 default }" containerID=c85961a1170e8912a0df10134d3e4f345120773e035e1c54d440bbda3e09fe89 datapathConfiguration="&{false false false false false }" interface=lxc1ad0fd6444c0 k8sPodName=openstack/glance-api-844657887c-q96f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c85961a117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-api-844657887c-q96f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c85961a117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-api-844657887c-q96f5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c85961a117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=63959 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-api-844657887c-q96f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c85961a117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=63959 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-api-844657887c-q96f5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c85961a117 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3420 identity=63959 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-api-844657887c-q96f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c85961a117 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3420 identity=63959 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-api-844657887c-q96f5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 c8a85b37-5939-4896-8af2-0f8fb9375872 default }" containerID=21cb604687b9b4e6c567c2a694cd252cb94e093efd9566ccee7053364229071e datapathConfiguration="&{false false false false false }" interface=lxc8d7ddf31c8af k8sPodName=openstack/placement-api-5f648c86bf-5bnjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21cb604687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21cb604687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=placement;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=placement;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=21cb604687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=21cb604687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=14140 identityLabels="k8s:application=placement,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=placement" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21cb604687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=14140 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 f220679a-f91b-41c7-9f63-0ce3d08e51bb default }" containerID=bcdedf6513252d41d4037d9c2ff91d0807d7b684e482b338a799f6b95f541777 datapathConfiguration="&{false false false false false }" interface=lxc675d44d9e337 k8sPodName=openstack/placement-db-init-kcr6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcdedf6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcdedf6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=241e166b-8013-4187-80df-579205e3a5ac,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=241e166b-8013-4187-80df-579205e3a5ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=241e166b-8013-4187-80df-579205e3a5ac;k8s:batch.kubernetes.io/job-name=placement-db-init;k8s:component=db-init;k8s:controller-uid=241e166b-8013-4187-80df-579205e3a5ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-init;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcdedf6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=10953 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=241e166b-8013-4187-80df-579205e3a5ac,k8s:batch.kubernetes.io/job-name=placement-db-init,k8s:component=db-init,k8s:controller-uid=241e166b-8013-4187-80df-579205e3a5ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-init,k8s:release_group=placement" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcdedf6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=10953 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21cb604687 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=318 identity=14140 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=21cb604687 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=318 identity=14140 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/placement-api-5f648c86bf-5bnjj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bcdedf6513 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2147 identity=10953 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcdedf6513 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2147 identity=10953 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcdedf6513 endpointID=2147 k8sNamespace=openstack k8sPodName=placement-db-init-kcr6j subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=241e166b-8013-4187-80df-579205e3a5ac k8s:batch.kubernetes.io/job-name=placement-db-init k8s:component=db-init k8s:controller-uid=241e166b-8013-4187-80df-579205e3a5ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-init k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=bcdedf6513 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2147 identity=10953 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/placement-db-init-kcr6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 4f193295-492a-40c9-9f93-8394a0662db8 default }" containerID=fb162e3848480c2a8c608cd765860eb63eadbfba91661097730e8e38ea20c75a datapathConfiguration="&{false false false false false }" interface=lxca04c69141f0e k8sPodName=openstack/placement-db-sync-tdwdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb162e3848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb162e3848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631;k8s:batch.kubernetes.io/job-name=placement-db-sync;k8s:component=db-sync;k8s:controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-db-sync;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb162e3848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=6697 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631,k8s:batch.kubernetes.io/job-name=placement-db-sync,k8s:component=db-sync,k8s:controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-db-sync,k8s:release_group=placement" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb162e3848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=6697 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb162e3848 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=462 identity=6697 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb162e3848 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=462 identity=6697 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb162e3848 endpointID=462 k8sNamespace=openstack k8sPodName=placement-db-sync-tdwdq subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631 k8s:batch.kubernetes.io/job-name=placement-db-sync k8s:component=db-sync k8s:controller-uid=8c878427-473e-4a3c-9a9e-6549b7300631 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-db-sync k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=fb162e3848 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=462 identity=6697 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/placement-db-sync-tdwdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 355816a7-8371-41b6-800d-fcf4aaea8a33 default }" containerID=2d38a80b4727ffa14a1377ec36fc753535ab0845e6f08af9bf94e41911822128 datapathConfiguration="&{false false false false false }" interface=lxc0e879bc61426 k8sPodName=openstack/placement-ks-service-qbk7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d38a80b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d38a80b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b6855648-01c1-4e60-8937-200fd40192c4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=b6855648-01c1-4e60-8937-200fd40192c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=b6855648-01c1-4e60-8937-200fd40192c4;k8s:batch.kubernetes.io/job-name=placement-ks-service;k8s:component=ks-service;k8s:controller-uid=b6855648-01c1-4e60-8937-200fd40192c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-service;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d38a80b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=46178 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=b6855648-01c1-4e60-8937-200fd40192c4,k8s:batch.kubernetes.io/job-name=placement-ks-service,k8s:component=ks-service,k8s:controller-uid=b6855648-01c1-4e60-8937-200fd40192c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-service,k8s:release_group=placement" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d38a80b47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=46178 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d38a80b47 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2875 identity=46178 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d38a80b47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2875 identity=46178 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n subsys=daemon level=info msg="Delete endpoint request" containerID=2d38a80b47 endpointID=2875 k8sNamespace=openstack k8sPodName=placement-ks-service-qbk7n subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=b6855648-01c1-4e60-8937-200fd40192c4 k8s:batch.kubernetes.io/job-name=placement-ks-service k8s:component=ks-service k8s:controller-uid=b6855648-01c1-4e60-8937-200fd40192c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-service k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=2d38a80b47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2875 identity=46178 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/placement-ks-service-qbk7n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 70b896f9-cae7-498d-9fac-c52bc95086fe default }" containerID=1ee47baf0623149f6bb2a986bb30d7fda8f8e4e3794f49ecedccb2355b034da9 datapathConfiguration="&{false false false false false }" interface=lxc85ddb502080a k8sPodName=openstack/placement-ks-user-bspq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ee47baf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ee47baf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552;k8s:batch.kubernetes.io/job-name=placement-ks-user;k8s:component=ks-user;k8s:controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-user;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ee47baf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=27544 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552,k8s:batch.kubernetes.io/job-name=placement-ks-user,k8s:component=ks-user,k8s:controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-user,k8s:release_group=placement" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ee47baf06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=27544 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ee47baf06 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2364 identity=27544 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ee47baf06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2364 identity=27544 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ee47baf06 endpointID=2364 k8sNamespace=openstack k8sPodName=placement-ks-user-bspq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552 k8s:batch.kubernetes.io/job-name=placement-ks-user k8s:component=ks-user k8s:controller-uid=86c2a1e6-878a-472a-874b-890dd3fb2552 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-user k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=1ee47baf06 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2364 identity=27544 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/placement-ks-user-bspq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 4875b5b3-5be0-43e7-8f90-2ef8efa1f3e0 default }" containerID=a1b988f56d17a905a306dd67254cd5e8cf6302558ecfcd63ce4a48fe78e5f1fb datapathConfiguration="&{false false false false false }" interface=lxcdf4b50bf2530 k8sPodName=openstack/placement-ks-endpoints-65cth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1b988f56d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1b988f56d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=placement;k8s:batch.kubernetes.io/controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017;k8s:batch.kubernetes.io/job-name=placement-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=placement-ks-endpoints;k8s:release_group=placement;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1b988f56d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=15510 identityLabels="k8s:application=placement,k8s:batch.kubernetes.io/controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017,k8s:batch.kubernetes.io/job-name=placement-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=placement-ks-endpoints,k8s:release_group=placement" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a1b988f56d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=15510 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1b988f56d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3309 identity=15510 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1b988f56d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3309 identity=15510 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.048940170708942604 newInterval=16m53s subsys=map-ct level=info msg="Delete endpoint request" containerID=a1b988f56d endpointID=3309 k8sNamespace=openstack k8sPodName=placement-ks-endpoints-65cth subsys=daemon level=info msg="Releasing key" key="[k8s:application=placement k8s:batch.kubernetes.io/controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017 k8s:batch.kubernetes.io/job-name=placement-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=87c5f05a-2372-435c-bd48-579f3dbf6017 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=placement-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=placement-ks-endpoints k8s:release_group=placement]" subsys=allocator level=info msg="Removed endpoint" containerID=a1b988f56d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3309 identity=15510 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/placement-ks-endpoints-65cth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 b6deb782-0523-4d28-b2e1-4d675b8e6d34 default }" containerID=36f4f5b5df2b4ec1cb74f988c38416d63cb99416f7cea5dde8be386ea16e187c datapathConfiguration="&{false false false false false }" interface=lxcb9684d620fdf k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36f4f5b5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36f4f5b5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36f4f5b5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=neutron-coredns;k8s:app.kubernetes.io/name=coredns;k8s:application=neutron;k8s:component=coredns;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36f4f5b5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=4335 identityLabels="k8s:app.kubernetes.io/instance=neutron-coredns,k8s:app.kubernetes.io/name=coredns,k8s:application=neutron,k8s:component=coredns,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36f4f5b5df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=4335 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36f4f5b5df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=126 identity=4335 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=36f4f5b5df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=126 identity=4335 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/neutron-coredns-7dd4958666-9sj6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 f946a90f-20b2-4b2e-a30d-eeccb2e1904e default }" containerID=6b7787280b288662a32897452634e9753d758383a30574157f7a994e3fd28d36 datapathConfiguration="&{false false false false false }" interface=lxcabe9606f3fdf k8sPodName=openstack/rabbitmq-nova-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b7787280b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b7787280b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-nova;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b7787280b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=25177 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-nova,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-nova-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-nova-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b7787280b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=25177 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b7787280b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2344 identity=25177 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b7787280b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2344 identity=25177 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-nova-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 c2c0274c-ccff-434c-9b5d-e487f93d244d default }" containerID=245ee529144c05eb518e2606f62f376599f3c92ac371849e496e3f1c2ef2221d datapathConfiguration="&{false false false false false }" interface=lxc84ef0c5ecb8d k8sPodName=openstack/nova-bootstrap-jg7dn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=245ee52914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1177 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=245ee52914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1177 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710;k8s:batch.kubernetes.io/job-name=nova-bootstrap;k8s:component=bootstrap;k8s:controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-bootstrap;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=245ee52914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1177 identity=46707 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710,k8s:batch.kubernetes.io/job-name=nova-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-bootstrap,k8s:release_group=nova" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=245ee52914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1177 identity=46707 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 0cdeec15-21e5-4b73-8418-ca675fc5e735 default }" containerID=a92ac75c5f438d4af85b60d22f52fbffae8150bf5387d43ed0bf0099f9471670 datapathConfiguration="&{false false false false false }" interface=lxccd80d5390cb4 k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a92ac75c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a92ac75c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=scheduler;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a92ac75c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 identity=31587 identityLabels="k8s:application=nova,k8s:component=scheduler,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-scheduler,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a92ac75c5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3468 identity=31587 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=245ee52914 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1177 identity=46707 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn subsys=endpoint level=info msg="Successful endpoint creation" containerID=245ee52914 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1177 identity=46707 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 41b2dfd1-4d03-4309-96b7-9267dbc98d66 default }" containerID=c785819666e06875595525309a7edab03a85ccbbf1d6e8e75eb67a0777802dc0 datapathConfiguration="&{false false false false false }" interface=lxcd885c213105f k8sPodName=openstack/nova-cell-setup-cc6mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c785819666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c785819666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.154 48cd3900-716d-437e-8399-5986f6da974c default }" containerID=efae872802e0f620ef5a2be18b9f35e1c33375e3e9bddc0adf6deb3de563259c datapathConfiguration="&{false false false false false }" interface=lxc64d8a4423e9c k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efae872802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efae872802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473;k8s:batch.kubernetes.io/job-name=nova-cell-setup;k8s:component=cell-setup;k8s:controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c785819666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=30603 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473,k8s:batch.kubernetes.io/job-name=nova-cell-setup,k8s:component=cell-setup,k8s:controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup,k8s:release_group=nova" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c785819666 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=30603 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efae872802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identity=8479 identityLabels="k8s:application=nova,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efae872802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1566 identity=8479 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 a672a107-e243-4429-b1e9-167b63d05bf0 default }" containerID=5571de8304e7bcb20ab620083b4c3fea0c6512982c64030c87cfc63094db5773 datapathConfiguration="&{false false false false false }" interface=lxc244b7ef76c97 k8sPodName=openstack/nova-db-init-w5tdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5571de8304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5571de8304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=a92ac75c5f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3468 identity=31587 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a92ac75c5f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3468 identity=31587 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/nova-scheduler-5ffdc4cbff-cz5hj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=efae872802 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1566 identity=8479 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efae872802 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1566 identity=8479 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/nova-conductor-7cb9c5b56c-qvhc5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 86c303f8-aa9f-426a-bc31-328f6ec2fa33 default }" containerID=33e6195c711faef12bfebbf9d40bd2f67ab07f81070c6f5b1454de0aec063564 datapathConfiguration="&{false false false false false }" interface=lxc2e95b63c7f97 k8sPodName=openstack/nova-api-osapi-87895447c-cw28f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33e6195c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/nova-api-osapi-87895447c-cw28f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33e6195c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/nova-api-osapi-87895447c-cw28f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c785819666 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1017 identity=30603 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c785819666 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1017 identity=30603 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 b1602e65-7cf7-451b-9960-94c1591057e2 default }" containerID=90d771cf0fd2692ac7c4340d5218b9c4a522a202eca797f540a9ae069346fd45 datapathConfiguration="&{false false false false false }" interface=lxcd5a70dc3857d k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90d771cf0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90d771cf0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2;k8s:batch.kubernetes.io/job-name=nova-db-init;k8s:component=db-init;k8s:controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-init;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5571de8304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=50388 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2,k8s:batch.kubernetes.io/job-name=nova-db-init,k8s:component=db-init,k8s:controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-init,k8s:release_group=nova" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5571de8304 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=50388 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=5571de8304 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=56 identity=50388 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5571de8304 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=56 identity=50388 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd subsys=daemon level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=os-api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33e6195c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=8676 identityLabels="k8s:application=nova,k8s:component=os-api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-osapi,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/nova-api-osapi-87895447c-cw28f oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=33e6195c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=8676 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/nova-api-osapi-87895447c-cw28f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33e6195c71 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=94 identity=8676 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/nova-api-osapi-87895447c-cw28f subsys=endpoint level=info msg="Successful endpoint creation" containerID=33e6195c71 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=94 identity=8676 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/nova-api-osapi-87895447c-cw28f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=90d771cf0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=metadata;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90d771cf0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=6256 identityLabels="k8s:application=nova,k8s:component=metadata,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-api-metadata,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90d771cf0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=6256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90d771cf0f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1153 identity=6256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90d771cf0f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1153 identity=6256 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/nova-api-metadata-b76d7cb9b-z4xt6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 12108a80-565d-4d99-8b7d-059906231a94 default }" containerID=5be81f3be9607cd66b3b201e5b872870e77a094698dde8a6b1794859d7936c3b datapathConfiguration="&{false false false false false }" interface=lxcc64c17e397bc k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5be81f3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5be81f3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5be81f3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=nova;k8s:component=novnc-proxy;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5be81f3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=32127 identityLabels="k8s:application=nova,k8s:component=novnc-proxy,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-novncproxy,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=nova" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5be81f3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=32127 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5be81f3be9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1374 identity=32127 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5be81f3be9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1374 identity=32127 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/nova-novncproxy-6547948c7b-7p7kd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5571de8304 endpointID=56 k8sNamespace=openstack k8sPodName=nova-db-init-w5tdd subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2 k8s:batch.kubernetes.io/job-name=nova-db-init k8s:component=db-init k8s:controller-uid=fe28bab2-9124-473d-b5b9-7e1e7d50f4d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=5571de8304 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=56 identity=50388 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/nova-db-init-w5tdd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 3ec40048-da3a-475f-bc46-8241a414a450 default }" containerID=7a7a3f8c6b07a7d181fce6d674f33ccebc85e079d51e26e776e8969cae930fb8 datapathConfiguration="&{false false false false false }" interface=lxc5d039f7a8ce1 k8sPodName=openstack/nova-db-sync-jt2tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a7a3f8c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a7a3f8c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262;k8s:batch.kubernetes.io/job-name=nova-db-sync;k8s:component=db-sync;k8s:controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-db-sync;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7a7a3f8c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7a7a3f8c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 identity=6386 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262,k8s:batch.kubernetes.io/job-name=nova-db-sync,k8s:component=db-sync,k8s:controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-db-sync,k8s:release_group=nova" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a7a3f8c6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3079 identity=6386 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a7a3f8c6b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3079 identity=6386 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a7a3f8c6b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3079 identity=6386 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a7a3f8c6b endpointID=3079 k8sNamespace=openstack k8sPodName=nova-db-sync-jt2tk subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262 k8s:batch.kubernetes.io/job-name=nova-db-sync k8s:component=db-sync k8s:controller-uid=e0b6219b-a64a-4fc0-a9fd-a82c3b541262 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-db-sync k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=7a7a3f8c6b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3079 identity=6386 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/nova-db-sync-jt2tk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 56bc6c8e-c5b0-46be-8c57-1d8ed648d300 default }" containerID=6778ef17aa8890e08ad0762e1e2258e833c2cf47f441a8f0564ecb5e294c076e datapathConfiguration="&{false false false false false }" interface=lxc9540c1091e35 k8sPodName=openstack/nova-rabbit-init-4cxrp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6778ef17aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6778ef17aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b;k8s:batch.kubernetes.io/job-name=nova-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-rabbit-init;k8s:release_group=nova;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6778ef17aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6778ef17aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=35483 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b,k8s:batch.kubernetes.io/job-name=nova-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-rabbit-init,k8s:release_group=nova" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6778ef17aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=35483 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6778ef17aa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1170 identity=35483 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6778ef17aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1170 identity=35483 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6778ef17aa endpointID=1170 k8sNamespace=openstack k8sPodName=nova-rabbit-init-4cxrp subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b k8s:batch.kubernetes.io/job-name=nova-rabbit-init k8s:component=rabbit-init k8s:controller-uid=451ac3fc-9d95-4df8-9af5-0e5d46ecd36b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-rabbit-init k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=6778ef17aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1170 identity=35483 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/nova-rabbit-init-4cxrp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 31f5a188-c4fa-4f9c-9b2a-092b4b32a93b default }" containerID=fc929c7bf7124111a757b6b11734d4417cb4fcb8cc5769580fe878121613bc34 datapathConfiguration="&{false false false false false }" interface=lxcf45d7b7e4aaf k8sPodName=openstack/nova-ks-service-xx2fv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc929c7bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2384 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc929c7bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2384 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4;k8s:batch.kubernetes.io/job-name=nova-ks-service;k8s:component=ks-service;k8s:controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-service;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc929c7bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2384 identity=61426 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4,k8s:batch.kubernetes.io/job-name=nova-ks-service,k8s:component=ks-service,k8s:controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-service,k8s:release_group=nova" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc929c7bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2384 identity=61426 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc929c7bf7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2384 identity=61426 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc929c7bf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2384 identity=61426 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv subsys=daemon level=info msg="Delete endpoint request" containerID=fc929c7bf7 endpointID=2384 k8sNamespace=openstack k8sPodName=nova-ks-service-xx2fv subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4 k8s:batch.kubernetes.io/job-name=nova-ks-service k8s:component=ks-service k8s:controller-uid=b6d33d6f-a7eb-4403-b7d5-229ff7ee48c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-service k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=fc929c7bf7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2384 identity=61426 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/nova-ks-service-xx2fv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 9d3402ed-3c91-4bf0-b36e-2bcf7a9c6d01 default }" containerID=3eb6b18194bd9f22cc4048cf29a42307c8598723900cb833f9bb4b59537bc8c1 datapathConfiguration="&{false false false false false }" interface=lxc553241e3a341 k8sPodName=openstack/nova-ks-endpoints-mld9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3eb6b18194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3eb6b18194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e;k8s:batch.kubernetes.io/job-name=nova-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-endpoints;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3eb6b18194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=5328 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e,k8s:batch.kubernetes.io/job-name=nova-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-endpoints,k8s:release_group=nova" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3eb6b18194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=5328 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3eb6b18194 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3057 identity=5328 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=3eb6b18194 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3057 identity=5328 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3eb6b18194 endpointID=3057 k8sNamespace=openstack k8sPodName=nova-ks-endpoints-mld9z subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e k8s:batch.kubernetes.io/job-name=nova-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b29d7d74-b62a-40de-a8f5-5d78fa47051e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-endpoints k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=3eb6b18194 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3057 identity=5328 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/nova-ks-endpoints-mld9z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 8f529e7d-3058-4195-bd8d-d465e244ef54 default }" containerID=b1cb8ca07f0c4786a7dd6be79a661bffd9e16aca394f0a53e73bedec0022b997 datapathConfiguration="&{false false false false false }" interface=lxc394948d0ed13 k8sPodName=openstack/nova-ks-user-69xhs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1cb8ca07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1cb8ca07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b5d77160-1786-418a-b27a-3611e5c87981,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=b5d77160-1786-418a-b27a-3611e5c87981,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=b5d77160-1786-418a-b27a-3611e5c87981;k8s:batch.kubernetes.io/job-name=nova-ks-user;k8s:component=ks-user;k8s:controller-uid=b5d77160-1786-418a-b27a-3611e5c87981;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-ks-user;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1cb8ca07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=5920 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=b5d77160-1786-418a-b27a-3611e5c87981,k8s:batch.kubernetes.io/job-name=nova-ks-user,k8s:component=ks-user,k8s:controller-uid=b5d77160-1786-418a-b27a-3611e5c87981,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-ks-user,k8s:release_group=nova" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1cb8ca07f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1764 identity=5920 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b1cb8ca07f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1764 identity=5920 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1cb8ca07f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1764 identity=5920 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs subsys=daemon level=info msg="Delete endpoint request" containerID=b1cb8ca07f endpointID=1764 k8sNamespace=openstack k8sPodName=nova-ks-user-69xhs subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b5d77160-1786-418a-b27a-3611e5c87981 k8s:batch.kubernetes.io/job-name=nova-ks-user k8s:component=ks-user k8s:controller-uid=b5d77160-1786-418a-b27a-3611e5c87981 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-ks-user k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=b1cb8ca07f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1764 identity=5920 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/nova-ks-user-69xhs subsys=endpoint level=info msg="Delete endpoint request" containerID=245ee52914 endpointID=1177 k8sNamespace=openstack k8sPodName=nova-bootstrap-jg7dn subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710 k8s:batch.kubernetes.io/job-name=nova-bootstrap k8s:component=bootstrap k8s:controller-uid=2047d110-774c-4ebe-8462-b13ffcc3b710 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-bootstrap k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=245ee52914 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1177 identity=46707 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/nova-bootstrap-jg7dn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 b99471d5-2406-4838-9aba-4bc6f0595726 default }" containerID=63413a9012764ba52cc7199001d6a14a53228fd481be4d88aa3568a2034dbb7e datapathConfiguration="&{false false false false false }" interface=lxcc590a1c43fcb k8sPodName=openstack/rabbitmq-neutron-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63413a9012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63413a9012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-neutron;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63413a9012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=29595 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-neutron,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-neutron-server-0" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=63413a9012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=29595 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63413a9012 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1241 identity=29595 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63413a9012 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1241 identity=29595 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rabbitmq-neutron-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 d756bbc0-8cd5-4591-88e9-6ed015c5e19a default }" containerID=1b99cac1dc6d8f7d7e71ffa0a73d5035784700f35749cd40398cb0f9ea92a7a1 datapathConfiguration="&{false false false false false }" interface=lxc4e76e53dda12 k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b99cac1dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b99cac1dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b99cac1dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=3874 identityLabels="k8s:application=neutron,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b99cac1dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=3874 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 b13794a1-3ddc-44cf-b487-f3c3d31f6cd7 default }" containerID=264f070fdd3346ec5a7619e2065abf462c80959547afe3589de7a494720b9ef4 datapathConfiguration="&{false false false false false }" interface=lxc710f4ec27c2c k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=264f070fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=264f070fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:component=rpc_server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=264f070fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=3677 identityLabels="k8s:application=neutron,k8s:component=rpc_server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rpc-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=neutron" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=264f070fdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=3677 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 6fffb767-c9e6-4f06-bca9-ec3dc1ab6f31 default }" containerID=5c0a7d1991732c9c84486ed077e77897bf0b478eb69d8a92036b55916e2242cd datapathConfiguration="&{false false false false false }" interface=lxcde274ef5e671 k8sPodName=openstack/neutron-db-init-n7nws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c0a7d1991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c0a7d1991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62;k8s:batch.kubernetes.io/job-name=neutron-db-init;k8s:component=db-init;k8s:controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c0a7d1991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=31756 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62,k8s:batch.kubernetes.io/job-name=neutron-db-init,k8s:component=db-init,k8s:controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-init,k8s:release_group=neutron" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c0a7d1991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=31756 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b99cac1dc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2 identity=3874 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b99cac1dc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2 identity=3874 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/neutron-server-6cc647c94f-4cqsc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=264f070fdd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2683 identity=3677 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=264f070fdd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2683 identity=3677 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/neutron-rpc-server-586c5bdcc-dblgl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5c0a7d1991 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1339 identity=31756 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c0a7d1991 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=31756 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c0a7d1991 endpointID=1339 k8sNamespace=openstack k8sPodName=neutron-db-init-n7nws subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62 k8s:batch.kubernetes.io/job-name=neutron-db-init k8s:component=db-init k8s:controller-uid=f41cb4c2-be93-4663-9fa5-bb7cc61ebd62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=5c0a7d1991 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=31756 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/neutron-db-init-n7nws subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 3987241f-4227-4789-a611-7a5692e29aa6 default }" containerID=f44de26fd86630e42dffd6157640b6a8867078bd21ad4ec4a2ffad7ae2b7717a datapathConfiguration="&{false false false false false }" interface=lxc1ced98dd5519 k8sPodName=openstack/neutron-db-sync-hmj4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f44de26fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f44de26fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334;k8s:batch.kubernetes.io/job-name=neutron-db-sync;k8s:component=db-sync;k8s:controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-db-sync;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f44de26fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 identity=61211 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334,k8s:batch.kubernetes.io/job-name=neutron-db-sync,k8s:component=db-sync,k8s:controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-db-sync,k8s:release_group=neutron" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f44de26fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 identity=61211 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f44de26fd8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3355 identity=61211 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=f44de26fd8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3355 identity=61211 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q subsys=daemon level=info msg="Delete endpoint request" containerID=f44de26fd8 endpointID=3355 k8sNamespace=openstack k8sPodName=neutron-db-sync-hmj4q subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334 k8s:batch.kubernetes.io/job-name=neutron-db-sync k8s:component=db-sync k8s:controller-uid=902d6612-95e5-4dbb-af55-2abf871c0334 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-db-sync k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=f44de26fd8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3355 identity=61211 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-db-sync-hmj4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 935df4bd-bd1d-4155-aee0-f49729cfe269 default }" containerID=f45e32d5ae6b35eec52fe3dfb5c92fe8b64e11855fe35957832a6ce90a9a6221 datapathConfiguration="&{false false false false false }" interface=lxce4531268ee8f k8sPodName=openstack/neutron-rabbit-init-x2kp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f45e32d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f45e32d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af;k8s:batch.kubernetes.io/job-name=neutron-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-rabbit-init;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f45e32d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=63623 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af,k8s:batch.kubernetes.io/job-name=neutron-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-rabbit-init,k8s:release_group=neutron" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f45e32d5ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4068 identity=63623 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f45e32d5ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4068 identity=63623 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f45e32d5ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4068 identity=63623 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f45e32d5ae endpointID=4068 k8sNamespace=openstack k8sPodName=neutron-rabbit-init-x2kp2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af k8s:batch.kubernetes.io/job-name=neutron-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1c871e59-e585-41ef-b226-aae7da5ad7af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-rabbit-init k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=f45e32d5ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4068 identity=63623 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/neutron-rabbit-init-x2kp2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 5fdddc3c-de94-445a-aa5e-6322a3816fbf default }" containerID=57d18c2fb42c3fb4747f11bd9361a060f7744bee5c80a6e62aeb4e9b413d9eb0 datapathConfiguration="&{false false false false false }" interface=lxc68c6f515dff3 k8sPodName=openstack/neutron-ks-service-hhz6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57d18c2fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57d18c2fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2;k8s:batch.kubernetes.io/job-name=neutron-ks-service;k8s:component=ks-service;k8s:controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-service;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57d18c2fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=51333 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2,k8s:batch.kubernetes.io/job-name=neutron-ks-service,k8s:component=ks-service,k8s:controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-service,k8s:release_group=neutron" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57d18c2fb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=51333 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=57d18c2fb4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2204 identity=51333 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=57d18c2fb4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2204 identity=51333 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l subsys=daemon level=info msg="Delete endpoint request" containerID=57d18c2fb4 endpointID=2204 k8sNamespace=openstack k8sPodName=neutron-ks-service-hhz6l subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2 k8s:batch.kubernetes.io/job-name=neutron-ks-service k8s:component=ks-service k8s:controller-uid=2e0b99d3-afb5-4299-9504-efe756d457a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-service k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=57d18c2fb4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2204 identity=51333 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/neutron-ks-service-hhz6l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 fb401e8b-d23f-4db3-acfb-2620fafff1eb default }" containerID=b0b028f72dd2946041bb30b2d6a91fefb7d9f9708364a58d41287af0014c46ff datapathConfiguration="&{false false false false false }" interface=lxc577c46b9653f k8sPodName=openstack/neutron-ks-endpoints-wq8f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0b028f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0b028f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44;k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-endpoints;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0b028f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=34984 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44,k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-endpoints,k8s:release_group=neutron" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0b028f72d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=34984 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b0b028f72d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2352 identity=34984 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0b028f72d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2352 identity=34984 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0b028f72d endpointID=2352 k8sNamespace=openstack k8sPodName=neutron-ks-endpoints-wq8f5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44 k8s:batch.kubernetes.io/job-name=neutron-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a08294ff-d873-4530-a998-d7c5b80cac44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-endpoints k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=b0b028f72d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2352 identity=34984 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/neutron-ks-endpoints-wq8f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 ccea9aa8-fa7b-4ac1-9a07-e376c8ec7461 default }" containerID=2d2ceede4772ca51d9530244a5f4cdc63fbcfb84add92d10806ff6899b5957a2 datapathConfiguration="&{false false false false false }" interface=lxcfa405a7e4a71 k8sPodName=openstack/neutron-ks-user-65czw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d2ceede47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d2ceede47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=neutron;k8s:batch.kubernetes.io/controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6;k8s:batch.kubernetes.io/job-name=neutron-ks-user;k8s:component=ks-user;k8s:controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=neutron-ks-user;k8s:release_group=neutron;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d2ceede47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=4510 identityLabels="k8s:application=neutron,k8s:batch.kubernetes.io/controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6,k8s:batch.kubernetes.io/job-name=neutron-ks-user,k8s:component=ks-user,k8s:controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=neutron-ks-user,k8s:release_group=neutron" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d2ceede47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=4510 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d2ceede47 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=115 identity=4510 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d2ceede47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=115 identity=4510 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d2ceede47 endpointID=115 k8sNamespace=openstack k8sPodName=neutron-ks-user-65czw subsys=daemon level=info msg="Releasing key" key="[k8s:application=neutron k8s:batch.kubernetes.io/controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6 k8s:batch.kubernetes.io/job-name=neutron-ks-user k8s:component=ks-user k8s:controller-uid=217f2d69-ca43-462f-97eb-3a524c8184a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=neutron-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=neutron-ks-user k8s:release_group=neutron]" subsys=allocator level=info msg="Removed endpoint" containerID=2d2ceede47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=115 identity=4510 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/neutron-ks-user-65czw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 302b8b90-f786-422c-9500-5e228c1faca9 default }" containerID=f8f6fcbae22c1d9cc3739007c25ff2dcd6a892b3fd0f9a030a48b321631cae34 datapathConfiguration="&{false false false false false }" interface=lxc191142c56b7d k8sPodName=openstack/rabbitmq-heat-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8f6fcbae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8f6fcbae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-heat;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f8f6fcbae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f8f6fcbae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=55438 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-heat,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-heat-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-heat-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8f6fcbae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=55438 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8f6fcbae2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=652 identity=55438 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8f6fcbae2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=652 identity=55438 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-heat-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 50dbca45-a13d-4f6f-bcc4-6d2948ba1d81 default }" containerID=baa6d3e706aa1a44b3599da94d8affc9360b321759b2732d6698d4c3470750bb datapathConfiguration="&{false false false false false }" interface=lxcbe7faba1a0a1 k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baa6d3e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baa6d3e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=baa6d3e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baa6d3e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=54780 identityLabels="k8s:application=heat,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baa6d3e706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=54780 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 ef54b96f-c12f-4342-a2eb-221975317555 default }" containerID=1c906ee60ec9241e8f85de995fab0560ed713cf2e2d5b3c69f596aa2753d6228 datapathConfiguration="&{false false false false false }" interface=lxc09c487a1fdca k8sPodName=openstack/heat-db-init-6tfj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c906ee60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 d6376a9e-debe-433c-bfab-cf1de0dea2c1 default }" containerID=2695dde519ade8fd5069543662062db5a08c10f792aff8dd7a6a4c45c8c6b76d datapathConfiguration="&{false false false false false }" interface=lxc601bf2af3eeb k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=1c906ee60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 subsys=endpoint level=info msg="New endpoint" containerID=2695dde519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=2695dde519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca;k8s:batch.kubernetes.io/job-name=heat-db-init;k8s:component=db-init;k8s:controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c906ee60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 identity=17808 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca,k8s:batch.kubernetes.io/job-name=heat-db-init,k8s:component=db-init,k8s:controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-init,k8s:release_group=heat" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c906ee60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3846 identity=17808 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=engine;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2695dde519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=3673 identityLabels="k8s:application=heat,k8s:component=engine,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2695dde519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=3673 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baa6d3e706 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=267 identity=54780 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=baa6d3e706 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=267 identity=54780 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/heat-api-5f8dc9b646-ggfnd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 5e503e2b-e185-4775-8565-001c49ddbd45 default }" containerID=989aa7763d76c02117886f87cbdbe3a3a6acc1236df81f69468d5cc356c46526 datapathConfiguration="&{false false false false false }" interface=lxc0f709885a13e k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=989aa7763d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=989aa7763d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:component=cfn;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=989aa7763d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=17416 identityLabels="k8s:application=heat,k8s:component=cfn,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-cfn,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=heat" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=989aa7763d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=17416 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c906ee60e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3846 identity=17808 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c906ee60e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3846 identity=17808 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2695dde519 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3867 identity=3673 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n subsys=endpoint level=info msg="Successful endpoint creation" containerID=2695dde519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3867 identity=3673 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/heat-engine-7ddfd87b7f-z264n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=989aa7763d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3165 identity=17416 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=989aa7763d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3165 identity=17416 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/heat-cfn-7d69fbdc9b-nsjqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c906ee60e endpointID=3846 k8sNamespace=openstack k8sPodName=heat-db-init-6tfj9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca k8s:batch.kubernetes.io/job-name=heat-db-init k8s:component=db-init k8s:controller-uid=3fcc59ed-37cb-4b7f-bd29-5b05cf3c01ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=1c906ee60e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3846 identity=17808 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/heat-db-init-6tfj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 77930169-1fa9-4a9c-92c2-d53fa3949ec5 default }" containerID=2d91d370065a29bed6917790b871258f63dff43388a60cc2a07ccc470a74fe72 datapathConfiguration="&{false false false false false }" interface=lxceeafec779147 k8sPodName=openstack/heat-db-sync-847m8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d91d37006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d91d37006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b;k8s:batch.kubernetes.io/job-name=heat-db-sync;k8s:component=db-sync;k8s:controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-db-sync;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d91d37006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=11642 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b,k8s:batch.kubernetes.io/job-name=heat-db-sync,k8s:component=db-sync,k8s:controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-db-sync,k8s:release_group=heat" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d91d37006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=11642 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d91d37006 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1743 identity=11642 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d91d37006 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1743 identity=11642 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d91d37006 endpointID=1743 k8sNamespace=openstack k8sPodName=heat-db-sync-847m8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b k8s:batch.kubernetes.io/job-name=heat-db-sync k8s:component=db-sync k8s:controller-uid=ca7a1098-1b68-4221-b165-8bbbb695043b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-db-sync k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=2d91d37006 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1743 identity=11642 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/heat-db-sync-847m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 08cbbae5-2024-4c9e-984e-26f41b522dab default }" containerID=488d4fa8ae8ff7eeed00a98df9c6797231bb9b0a99bd215aa30a6ead9fcf1134 datapathConfiguration="&{false false false false false }" interface=lxc9e90be211e06 k8sPodName=openstack/heat-rabbit-init-whqj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=488d4fa8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=488d4fa8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=488d4fa8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55;k8s:batch.kubernetes.io/job-name=heat-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-rabbit-init;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=488d4fa8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=43741 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55,k8s:batch.kubernetes.io/job-name=heat-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-rabbit-init,k8s:release_group=heat" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=488d4fa8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=43741 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=488d4fa8ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2022 identity=43741 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=488d4fa8ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2022 identity=43741 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=488d4fa8ae endpointID=2022 k8sNamespace=openstack k8sPodName=heat-rabbit-init-whqj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55 k8s:batch.kubernetes.io/job-name=heat-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3b2d7af7-cb6c-4ff2-921c-e59bb53f9c55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-rabbit-init k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=488d4fa8ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2022 identity=43741 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/heat-rabbit-init-whqj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 c580636a-8a71-46d5-9262-ac5b3b646976 default }" containerID=d4eb7eca0e20283a449d7e45690e05ac06014561ebf5529cb683938b785de07d datapathConfiguration="&{false false false false false }" interface=lxcf22d865cc7dc k8sPodName=openstack/heat-ks-service-85zls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4eb7eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4eb7eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d4eb7eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c;k8s:batch.kubernetes.io/job-name=heat-ks-service;k8s:component=ks-service;k8s:controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-service;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4eb7eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identity=46456 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c,k8s:batch.kubernetes.io/job-name=heat-ks-service,k8s:component=ks-service,k8s:controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-service,k8s:release_group=heat" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4eb7eca0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1178 identity=46456 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4eb7eca0e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1178 identity=46456 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4eb7eca0e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1178 identity=46456 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4eb7eca0e endpointID=1178 k8sNamespace=openstack k8sPodName=heat-ks-service-85zls subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c k8s:batch.kubernetes.io/job-name=heat-ks-service k8s:component=ks-service k8s:controller-uid=eae586b0-913f-463c-8938-4cb36aeb084c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-service k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=d4eb7eca0e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1178 identity=46456 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/heat-ks-service-85zls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 fe99bddb-0d64-4586-8754-96775b07c47a default }" containerID=e865f868634b16ab1aea88c1b811bbc9f04fb2b77479fb8023a524ed8fb279e6 datapathConfiguration="&{false false false false false }" interface=lxcbcfb08d093bd k8sPodName=openstack/heat-ks-endpoints-tb6k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e865f86863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e865f86863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e865f86863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48;k8s:batch.kubernetes.io/job-name=heat-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-endpoints;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e865f86863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=12309 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48,k8s:batch.kubernetes.io/job-name=heat-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-endpoints,k8s:release_group=heat" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e865f86863 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=12309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e865f86863 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1628 identity=12309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e865f86863 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1628 identity=12309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e865f86863 endpointID=1628 k8sNamespace=openstack k8sPodName=heat-ks-endpoints-tb6k5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48 k8s:batch.kubernetes.io/job-name=heat-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f51d6db4-e17a-4255-bdf6-11e59da7ab48 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-endpoints k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=e865f86863 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1628 identity=12309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/heat-ks-endpoints-tb6k5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 4c150ccf-4514-4135-82ee-005ae7b45fbf default }" containerID=958d6dd9e799ab93dac99097a2a669d4c162d88d7b2034d763d3e860fa7aae28 datapathConfiguration="&{false false false false false }" interface=lxc3b6987298b8b k8sPodName=openstack/heat-ks-user-s67lq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=958d6dd9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=958d6dd9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad;k8s:batch.kubernetes.io/job-name=heat-ks-user;k8s:component=ks-user;k8s:controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=958d6dd9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=30251 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad,k8s:batch.kubernetes.io/job-name=heat-ks-user,k8s:component=ks-user,k8s:controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-ks-user,k8s:release_group=heat" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=958d6dd9e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=30251 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=958d6dd9e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=82 identity=30251 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq subsys=endpoint level=info msg="Successful endpoint creation" containerID=958d6dd9e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=30251 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c785819666 endpointID=1017 k8sNamespace=openstack k8sPodName=nova-cell-setup-cc6mz subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473 k8s:batch.kubernetes.io/job-name=nova-cell-setup k8s:component=cell-setup k8s:controller-uid=b1ff2e7e-efde-4e16-91cf-40fb3d7ca473 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=c785819666 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1017 identity=30603 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/nova-cell-setup-cc6mz subsys=endpoint level=info msg="Delete endpoint request" containerID=958d6dd9e7 endpointID=82 k8sNamespace=openstack k8sPodName=heat-ks-user-s67lq subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad k8s:batch.kubernetes.io/job-name=heat-ks-user k8s:component=ks-user k8s:controller-uid=407ae57c-9b3f-4ae7-ab48-2e2f6f8b5aad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=958d6dd9e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=82 identity=30251 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/heat-ks-user-s67lq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 9f0c565a-f5f6-432e-9bee-d48dd4d52ef1 default }" containerID=e40b320f4a3c955c99b398153ce04bfef7ee209f43ecb03052f3c7b2acee94c9 datapathConfiguration="&{false false false false false }" interface=lxc10384835e33d k8sPodName=openstack/heat-bootstrap-fpmmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e40b320f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e40b320f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b;k8s:batch.kubernetes.io/job-name=heat-bootstrap;k8s:component=bootstrap;k8s:controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-bootstrap;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e40b320f4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=30478 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b,k8s:batch.kubernetes.io/job-name=heat-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-bootstrap,k8s:release_group=heat" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e40b320f4a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=110 identity=30478 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e40b320f4a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=110 identity=30478 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e40b320f4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=110 identity=30478 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 2a605269-716e-4d15-96de-794b8765d233 default }" containerID=b18fd6428df3891e4dc95167eb2011127382f466a9689a03941c7fe1adc17b34 datapathConfiguration="&{false false false false false }" interface=lxc13241ad050c2 k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b18fd6428d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b18fd6428d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757470,k8s:component=engine-cleaner,k8s:controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757470,k8s:release_group=heat" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757470;k8s:component=engine-cleaner;k8s:controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757470;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b18fd6428d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=11264 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757470,k8s:component=engine-cleaner,k8s:controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757470,k8s:release_group=heat" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b18fd6428d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1319 identity=11264 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b18fd6428d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1319 identity=11264 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b18fd6428d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1319 identity=11264 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e40b320f4a endpointID=110 k8sNamespace=openstack k8sPodName=heat-bootstrap-fpmmg subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b k8s:batch.kubernetes.io/job-name=heat-bootstrap k8s:component=bootstrap k8s:controller-uid=1fc54cf2-ccb3-447a-8ec5-cdfc70669a2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-bootstrap k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=e40b320f4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=110 identity=30478 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/heat-bootstrap-fpmmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 2357ed1f-ed96-4cde-9e1e-75cf35c29b28 default }" containerID=8933485d862976ad57c9fae5e65f7e78e876db5c459c9604cb02bc6f546407af datapathConfiguration="&{false false false false false }" interface=lxc22a1328e999b k8sPodName=openstack/heat-domain-ks-user-dmvf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8933485d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8933485d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8933485d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83;k8s:batch.kubernetes.io/job-name=heat-domain-ks-user;k8s:component=ks-user;k8s:controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-domain-ks-user;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8933485d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=12327 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83,k8s:batch.kubernetes.io/job-name=heat-domain-ks-user,k8s:component=ks-user,k8s:controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-domain-ks-user,k8s:release_group=heat" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8933485d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=12327 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8933485d86 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=743 identity=12327 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8933485d86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=743 identity=12327 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8933485d86 endpointID=743 k8sNamespace=openstack k8sPodName=heat-domain-ks-user-dmvf2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83 k8s:batch.kubernetes.io/job-name=heat-domain-ks-user k8s:component=ks-user k8s:controller-uid=13da4209-6b0b-4e51-be21-7c4d63fdce83 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-ks-user-domain k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-domain-ks-user k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=8933485d86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=743 identity=12327 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/heat-domain-ks-user-dmvf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 69396526-15ad-4aae-937f-151c7052b302 default }" containerID=25ec62abb11e9e85fc6a946571420c27fcdbbe4959fcd82b43be3a19dd63aff5 datapathConfiguration="&{false false false false false }" interface=lxcc71b28cc1ad7 k8sPodName=openstack/heat-trusts-rcvrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25ec62abb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25ec62abb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7;k8s:batch.kubernetes.io/job-name=heat-trusts;k8s:component=trusts;k8s:controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-trusts;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25ec62abb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=47119 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7,k8s:batch.kubernetes.io/job-name=heat-trusts,k8s:component=trusts,k8s:controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-trusts,k8s:release_group=heat" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25ec62abb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=47119 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25ec62abb1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=456 identity=47119 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=25ec62abb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=456 identity=47119 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b18fd6428d endpointID=1319 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757470-xkrpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757470 k8s:component=engine-cleaner k8s:controller-uid=d4df63bb-f770-41f8-881d-2ec5eed8e707 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757470 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=b18fd6428d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1319 identity=11264 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757470-xkrpj subsys=endpoint level=info msg="Delete endpoint request" containerID=25ec62abb1 endpointID=456 k8sNamespace=openstack k8sPodName=heat-trusts-rcvrq subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7 k8s:batch.kubernetes.io/job-name=heat-trusts k8s:component=trusts k8s:controller-uid=d12e6f9e-e315-4b12-b051-260ce6b811f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-trusts k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-trusts k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=25ec62abb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=456 identity=47119 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/heat-trusts-rcvrq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 1f4633e6-85e7-4574-82b1-8b614a3b9511 default }" containerID=417e020f79f600c6076811b4675ca0f7156a81e7c7ad0a8490ba70d280955d81 datapathConfiguration="&{false false false false false }" interface=lxc75cad32663a8 k8sPodName=openstack/horizon-5c5988c78d-h4zt4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=417e020f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/horizon-5c5988c78d-h4zt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=417e020f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/horizon-5c5988c78d-h4zt4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=417e020f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=35496 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/horizon-5c5988c78d-h4zt4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=417e020f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=35496 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/horizon-5c5988c78d-h4zt4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 e6dec7d7-c43a-423c-b75a-896a80924148 default }" containerID=850db071660047be778f2ec4d522147e996026e56eaa58ffc11596802b70ec9a datapathConfiguration="&{false false false false false }" interface=lxc0bbd244b8658 k8sPodName=openstack/horizon-db-init-q4t2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=850db07166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=850db07166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=850db07166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=56452 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=850db07166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=56 identity=56452 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=417e020f79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1444 identity=35496 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/horizon-5c5988c78d-h4zt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=417e020f79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1444 identity=35496 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/horizon-5c5988c78d-h4zt4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=850db07166 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=56 identity=56452 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=850db07166 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=56 identity=56452 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=850db07166 endpointID=56 k8sNamespace=openstack k8sPodName=horizon-db-init-q4t2l subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=fbe72bca-ae32-4e39-abf7-bc4355f6e280 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=850db07166 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=56 identity=56452 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-db-init-q4t2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 89020781-d3e8-449d-9a39-445dff3dadcc default }" containerID=0c1c59ebda9e1ee1410e74bd3e2ba43efe348f265db43010f97eba03d784151f datapathConfiguration="&{false false false false false }" interface=lxcc0641f5429c9 k8sPodName=openstack/horizon-db-sync-z9cgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c1c59ebda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c1c59ebda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c1c59ebda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=2020 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c1c59ebda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=2020 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c1c59ebda datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1298 identity=2020 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c1c59ebda datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1298 identity=2020 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0c1c59ebda endpointID=1298 k8sNamespace=openstack k8sPodName=horizon-db-sync-z9cgb subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=aed19468-725c-4dc0-8c7e-445207e74f28 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=0c1c59ebda datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1298 identity=2020 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/horizon-db-sync-z9cgb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 271a33e0-79b1-470d-ae35-dc52a6e2ea57 default }" containerID=94c83bebc3b1f4980c5039b5496553e8a78ab523923a4899290cbba0ce106012 datapathConfiguration="&{false false false false false }" interface=lxcc45de5b1d7cf k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94c83bebc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94c83bebc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475,k8s:component=engine-cleaner,k8s:controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757475,k8s:release_group=heat" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475;k8s:component=engine-cleaner;k8s:controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757475;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94c83bebc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=46351 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475,k8s:component=engine-cleaner,k8s:controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757475,k8s:release_group=heat" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94c83bebc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=46351 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94c83bebc3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=336 identity=46351 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw subsys=endpoint level=info msg="Successful endpoint creation" containerID=94c83bebc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=336 identity=46351 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94c83bebc3 endpointID=336 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757475-8j2xw subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2 k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757475 k8s:component=engine-cleaner k8s:controller-uid=d1dfce18-6a02-477f-9b09-ae2cea7ab5e2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757475 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=94c83bebc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=336 identity=46351 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757475-8j2xw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 6ce0e421-5758-47a5-a0f2-98c3ceff36ed default }" containerID=523fd54dccc8f8cabba7ad5891f73309a2fa975689474d9125525df1c8ccd9ca datapathConfiguration="&{false false false false false }" interface=lxc796daecc7225 k8sPodName=openstack/nova-cell-setup-29757480-nhx89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=523fd54dcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=523fd54dcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8;k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480;k8s:component=cell-setup;k8s:controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-cell-setup-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=523fd54dcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=4098 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8,k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480,k8s:component=cell-setup,k8s:controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-cell-setup-29757480,k8s:release_group=nova" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=523fd54dcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=4098 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 1b6748ad-317e-4f47-af1e-6540dd859144 default }" containerID=88a1f7df2dc47401dc35b8444bba84acd8110c78ca113c916f3b699138529b4e datapathConfiguration="&{false false false false false }" interface=lxc559bbc720da1 k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88a1f7df2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88a1f7df2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=nova;k8s:batch.kubernetes.io/controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277;k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480;k8s:component=service-cleaner;k8s:controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=nova-service-cleaner-29757480;k8s:release_group=nova;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88a1f7df2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=20266 identityLabels="k8s:application=nova,k8s:batch.kubernetes.io/controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277,k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480,k8s:component=service-cleaner,k8s:controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=nova-service-cleaner-29757480,k8s:release_group=nova" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88a1f7df2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=20266 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 22d2c8b9-c1fe-4e72-a168-5f1f58100f43 default }" containerID=a9846614f6830f21eb04158604f36ab62d21c55714b38f3ee8cf9383da542840 datapathConfiguration="&{false false false false false }" interface=lxc6cd2999a6f3e k8sPodName=openstack/heat-engine-cleaner-29757480-t687p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9846614f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2663 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9846614f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2663 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480,k8s:component=engine-cleaner,k8s:controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757480,k8s:release_group=heat" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=heat;k8s:batch.kubernetes.io/controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb;k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480;k8s:component=engine-cleaner;k8s:controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=heat-engine-cleaner-29757480;k8s:release_group=heat;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9846614f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2663 identity=7948 identityLabels="k8s:application=heat,k8s:batch.kubernetes.io/controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb,k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480,k8s:component=engine-cleaner,k8s:controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=heat-engine-cleaner-29757480,k8s:release_group=heat" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9846614f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2663 identity=7948 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=523fd54dcc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=515 identity=4098 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=523fd54dcc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=515 identity=4098 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88a1f7df2d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=759 identity=20266 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=88a1f7df2d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=759 identity=20266 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9846614f6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2663 identity=7948 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9846614f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2663 identity=7948 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9846614f6 endpointID=2663 k8sNamespace=openstack k8sPodName=heat-engine-cleaner-29757480-t687p subsys=daemon level=info msg="Releasing key" key="[k8s:application=heat k8s:batch.kubernetes.io/controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb k8s:batch.kubernetes.io/job-name=heat-engine-cleaner-29757480 k8s:component=engine-cleaner k8s:controller-uid=0b84c82b-024b-453b-a376-1aab0d3083cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=heat-engine-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=heat-engine-cleaner-29757480 k8s:release_group=heat]" subsys=allocator level=info msg="Removed endpoint" containerID=a9846614f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2663 identity=7948 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/heat-engine-cleaner-29757480-t687p subsys=endpoint level=info msg="Delete endpoint request" containerID=523fd54dcc endpointID=515 k8sNamespace=openstack k8sPodName=nova-cell-setup-29757480-nhx89 subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8 k8s:batch.kubernetes.io/job-name=nova-cell-setup-29757480 k8s:component=cell-setup k8s:controller-uid=1aa11826-8fff-42e7-9f25-f02499909cc8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-cell-setup-cron k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-cell-setup-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=523fd54dcc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=515 identity=4098 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/nova-cell-setup-29757480-nhx89 subsys=endpoint level=info msg="Delete endpoint request" containerID=88a1f7df2d endpointID=759 k8sNamespace=openstack k8sPodName=nova-service-cleaner-29757480-4bgkw subsys=daemon level=info msg="Releasing key" key="[k8s:application=nova k8s:batch.kubernetes.io/controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277 k8s:batch.kubernetes.io/job-name=nova-service-cleaner-29757480 k8s:component=service-cleaner k8s:controller-uid=66093f6a-195e-4afa-abeb-afec6c1c0277 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=nova-service-cleaner k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=nova-service-cleaner-29757480 k8s:release_group=nova]" subsys=allocator level=info msg="Removed endpoint" containerID=88a1f7df2d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=759 identity=20266 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/nova-service-cleaner-29757480-4bgkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 11abd2b8-0f6a-4e88-94cf-cd21bc3b6a2e default }" containerID=f5712059d7af7c6354d82c3bd132f9abdeb71572e6187db4559684c2c96c295f datapathConfiguration="&{false false false false false }" interface=lxc1352075865fe k8sPodName=openstack/tempest-ks-user-nrjmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5712059d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5712059d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2;k8s:batch.kubernetes.io/job-name=tempest-ks-user;k8s:component=ks-user;k8s:controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-ks-user;k8s:release_group=tempest;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5712059d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=9909 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2,k8s:batch.kubernetes.io/job-name=tempest-ks-user,k8s:component=ks-user,k8s:controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-ks-user,k8s:release_group=tempest" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5712059d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=9909 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5712059d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=104 identity=9909 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5712059d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=104 identity=9909 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5712059d7 endpointID=104 k8sNamespace=openstack k8sPodName=tempest-ks-user-nrjmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2 k8s:batch.kubernetes.io/job-name=tempest-ks-user k8s:component=ks-user k8s:controller-uid=748ec3fd-373d-4eee-8c19-7afeb1dbabf2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-ks-user k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=f5712059d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=104 identity=9909 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/tempest-ks-user-nrjmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 ed147b5f-ca3d-4387-9e6f-921a71b99a2e default }" containerID=6381e0bc571dd4b2bec1ec710ee3aa5a74b245718571eaeab1c4be1833967a93 datapathConfiguration="&{false false false false false }" interface=lxc348b56e8ccf9 k8sPodName=openstack/tempest-run-tests-g4bf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6381e0bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6381e0bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=tempest;k8s:batch.kubernetes.io/controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43;k8s:batch.kubernetes.io/job-name=tempest-run-tests;k8s:component=run-tests;k8s:controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=tempest-run-tests;k8s:release_group=tempest;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6381e0bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=30717 identityLabels="k8s:application=tempest,k8s:batch.kubernetes.io/controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43,k8s:batch.kubernetes.io/job-name=tempest-run-tests,k8s:component=run-tests,k8s:controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=tempest-run-tests,k8s:release_group=tempest" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6381e0bc57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3730 identity=30717 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6381e0bc57 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3730 identity=30717 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6381e0bc57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3730 identity=30717 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6381e0bc57 endpointID=3730 k8sNamespace=openstack k8sPodName=tempest-run-tests-g4bf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=tempest k8s:batch.kubernetes.io/controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43 k8s:batch.kubernetes.io/job-name=tempest-run-tests k8s:component=run-tests k8s:controller-uid=5ef5dc6b-b106-4fa2-a72c-553ea7bfaa43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=tempest-run-tests k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=tempest-run-tests k8s:release_group=tempest]" subsys=allocator level=info msg="Removed endpoint" containerID=6381e0bc57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3730 identity=30717 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/tempest-run-tests-g4bf7 subsys=endpoint