I0527 19:33:07.609922 1 options.go:220] external host was not specified, using 199.19.213.209 I0527 19:33:07.610729 1 server.go:148] Version: v1.28.13 I0527 19:33:07.610802 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0527 19:33:08.211527 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0527 19:33:08.228222 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0527 19:33:08.228244 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0527 19:33:08.228534 1 instance.go:298] Using reconciler: lease I0527 19:33:08.274348 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0527 19:33:08.274372 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0527 19:33:08.515919 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0527 19:33:08.516087 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0527 19:33:08.961138 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0527 19:33:08.971148 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0527 19:33:08.971178 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.971191 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.971739 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0527 19:33:08.971757 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0527 19:33:08.972752 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0527 19:33:08.973617 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0527 19:33:08.973636 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0527 19:33:08.973643 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0527 19:33:08.975383 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0527 19:33:08.975397 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0527 19:33:08.976234 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0527 19:33:08.976248 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.976253 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.976840 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0527 19:33:08.976854 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.976955 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0527 19:33:08.977654 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0527 19:33:08.979021 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0527 19:33:08.979033 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.979037 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.979523 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0527 19:33:08.979537 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.979541 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.980250 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0527 19:33:08.980264 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0527 19:33:08.981789 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0527 19:33:08.981804 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.981810 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.982322 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0527 19:33:08.982337 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.982341 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.984226 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0527 19:33:08.984240 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.984244 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.985155 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0527 19:33:08.986206 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0527 19:33:08.986219 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.986224 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.989229 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0527 19:33:08.989243 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0527 19:33:08.989248 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0527 19:33:08.990061 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0527 19:33:08.990096 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0527 19:33:08.990103 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0527 19:33:08.990598 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0527 19:33:08.990612 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0527 19:33:09.027545 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0527 19:33:09.027575 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0527 19:33:09.415176 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0527 19:33:09.415212 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0527 19:33:09.415472 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0527 19:33:09.415879 1 secure_serving.go:213] Serving securely on [::]:6443 I0527 19:33:09.415987 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0527 19:33:09.416011 1 controller.go:78] Starting OpenAPI AggregationController I0527 19:33:09.416065 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0527 19:33:09.416412 1 gc_controller.go:78] Starting apiserver lease garbage collector I0527 19:33:09.416463 1 controller.go:80] Starting OpenAPI V3 AggregationController I0527 19:33:09.416658 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0527 19:33:09.416872 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0527 19:33:09.416893 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0527 19:33:09.417028 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0527 19:33:09.417131 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0527 19:33:09.417306 1 controller.go:116] Starting legacy_token_tracking_controller I0527 19:33:09.417332 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0527 19:33:09.416678 1 available_controller.go:423] Starting AvailableConditionController I0527 19:33:09.417461 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0527 19:33:09.458373 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0527 19:33:09.458451 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0527 19:33:09.458853 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0527 19:33:09.459389 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0527 19:33:09.460301 1 gc_controller.go:78] Starting apiserver lease garbage collector I0527 19:33:09.460506 1 system_namespaces_controller.go:67] Starting system namespaces controller I0527 19:33:09.460752 1 controller.go:134] Starting OpenAPI controller I0527 19:33:09.460858 1 controller.go:85] Starting OpenAPI V3 controller I0527 19:33:09.460951 1 naming_controller.go:291] Starting NamingConditionController I0527 19:33:09.461173 1 establishing_controller.go:76] Starting EstablishingController I0527 19:33:09.461228 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0527 19:33:09.461306 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0527 19:33:09.461389 1 crd_finalizer.go:266] Starting CRDFinalizer I0527 19:33:09.469041 1 aggregator.go:164] waiting for initial CRD sync... I0527 19:33:09.469344 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0527 19:33:09.469356 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0527 19:33:09.469362 1 shared_informer.go:318] Caches are synced for crd-autoregister I0527 19:33:09.469440 1 aggregator.go:166] initial CRD sync complete... I0527 19:33:09.469492 1 autoregister_controller.go:141] Starting autoregister controller I0527 19:33:09.469509 1 cache.go:32] Waiting for caches to sync for autoregister controller I0527 19:33:09.469514 1 cache.go:39] Caches are synced for autoregister controller I0527 19:33:09.511656 1 shared_informer.go:318] Caches are synced for node_authorizer I0527 19:33:09.517389 1 apf_controller.go:379] Running API Priority and Fairness config worker I0527 19:33:09.517409 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0527 19:33:09.517526 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0527 19:33:09.517566 1 shared_informer.go:318] Caches are synced for configmaps I0527 19:33:09.517761 1 cache.go:39] Caches are synced for AvailableConditionController controller I0527 19:33:09.520713 1 controller.go:624] quota admission added evaluator for: namespaces E0527 19:33:09.527405 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0527 19:33:09.543876 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0527 19:33:09.558906 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0527 19:33:10.464176 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0527 19:33:10.468442 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0527 19:33:10.468465 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0527 19:33:11.358168 1 trace.go:236] Trace[1426245132]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:7b453755-386a-4986-a612-f267fe63b5eb,client:::1,protocol:HTTP/2.0,resource:clusterroles,scope:resource,url:/apis/rbac.authorization.k8s.io/v1/clusterroles,user-agent:kube-apiserver/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:POST (27-May-2026 19:33:10.833) (total time: 524ms): Trace[1426245132]: ["Create etcd3" audit-id:7b453755-386a-4986-a612-f267fe63b5eb,key:/clusterroles/system:controller:service-controller,type:*rbac.ClusterRole,resource:clusterroles.rbac.authorization.k8s.io 524ms (19:33:10.833) Trace[1426245132]: ---"Txn call succeeded" 524ms (19:33:11.357)] Trace[1426245132]: [524.965709ms] [524.965709ms] END I0527 19:33:11.960363 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0527 19:33:12.017240 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0527 19:33:12.136273 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0527 19:33:12.145023 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.209] I0527 19:33:12.147510 1 controller.go:624] quota admission added evaluator for: endpoints I0527 19:33:12.154475 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0527 19:33:12.785513 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0527 19:33:13.678081 1 controller.go:624] quota admission added evaluator for: deployments.apps I0527 19:33:13.755458 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0527 19:33:13.855262 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0527 19:33:17.646626 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0527 19:33:17.831701 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0527 19:33:45.578023 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0527 19:33:45.881502 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0527 19:33:45.905271 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0527 19:33:45.906248 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0527 19:33:45.938728 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0527 19:33:45.968333 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0527 19:33:45.987544 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0527 19:33:45.998095 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0527 19:33:46.017069 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0527 19:33:46.017122 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0527 19:33:46.088025 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0527 19:33:46.088064 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0527 19:33:46.101339 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0527 19:33:46.101404 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0527 19:33:46.136689 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0527 19:33:46.281842 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0527 19:33:46.281881 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0527 19:33:46.293491 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:46.346751 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:46.390415 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:46.418256 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:46.425755 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:47.117060 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:47.197021 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0527 19:33:52.930302 1 trace.go:236] Trace[1172007455]: "Create" accept:application/json,audit-id:10a20c92-9668-474b-ab0d-9753a9953c10,client:199.19.213.209,protocol:HTTP/2.0,resource:mutatingwebhookconfigurations,scope:resource,url:/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations,user-agent:Helm/3.11.2,verb:POST (27-May-2026 19:33:52.314) (total time: 615ms): Trace[1172007455]: ["Create etcd3" audit-id:10a20c92-9668-474b-ab0d-9753a9953c10,key:/mutatingwebhookconfigurations/envoy-gateway-topology-injector.envoy-gateway-system,type:*admissionregistration.MutatingWebhookConfiguration,resource:mutatingwebhookconfigurations.admissionregistration.k8s.io 612ms (19:33:52.317) Trace[1172007455]: ---"Txn call succeeded" 611ms (19:33:52.929)] Trace[1172007455]: [615.457908ms] [615.457908ms] END I0527 19:33:53.424104 1 controller.go:624] quota admission added evaluator for: jobs.batch I0527 19:33:54.574206 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0527 19:33:54.581415 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0527 19:33:54.589706 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0527 19:33:54.757169 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0527 19:33:55.037487 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0527 19:33:55.163750 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0527 19:33:55.364339 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0527 19:33:57.374385 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0527 19:33:57.808701 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0527 19:33:58.340397 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0527 19:33:58.570441 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0527 19:34:04.319482 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0527 19:34:04.319593 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0527 19:34:05.066733 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0527 19:34:14.027068 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.103.212.32"} W0527 19:34:14.059774 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.103.212.32:9443: connect: connection refused E0527 19:34:14.059803 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.103.212.32:9443: connect: connection refused