I0713 16:44:45.415576       1 options.go:220] external host was not specified, using 199.204.45.53
I0713 16:44:45.416314       1 server.go:148] Version: v1.28.13
I0713 16:44:45.416337       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0713 16:44:45.779683       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0713 16:44:45.787375       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0713 16:44:45.787424       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0713 16:44:45.788000       1 instance.go:298] Using reconciler: lease
I0713 16:44:46.124975       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0713 16:44:46.125001       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0713 16:44:46.365330       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0713 16:44:46.365503       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0713 16:44:46.860954       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0713 16:44:46.874333       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0713 16:44:46.874371       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.874378       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.875040       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0713 16:44:46.875055       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0713 16:44:46.876155       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0713 16:44:46.877144       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0713 16:44:46.877162       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0713 16:44:46.877167       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0713 16:44:46.878984       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0713 16:44:46.879004       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0713 16:44:46.880325       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0713 16:44:46.880345       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.880351       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.881099       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0713 16:44:46.881113       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.881143       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0713 16:44:46.881644       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0713 16:44:46.883109       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0713 16:44:46.883124       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.883128       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.883582       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0713 16:44:46.883595       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.883599       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.884419       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0713 16:44:46.884469       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0713 16:44:46.886017       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0713 16:44:46.886031       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.886036       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.886575       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0713 16:44:46.886590       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.886594       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.888544       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0713 16:44:46.888557       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.888560       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.889532       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0713 16:44:46.890493       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0713 16:44:46.890507       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.890511       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.893977       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0713 16:44:46.893997       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0713 16:44:46.894001       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0713 16:44:46.894787       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0713 16:44:46.894801       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0713 16:44:46.894806       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0713 16:44:46.895321       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0713 16:44:46.895335       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0713 16:44:46.932789       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0713 16:44:46.932830       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0713 16:44:47.348385       1 secure_serving.go:213] Serving securely on [::]:6443
I0713 16:44:47.348656       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0713 16:44:47.348811       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0713 16:44:47.348889       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0713 16:44:47.351160       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0713 16:44:47.351208       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0713 16:44:47.351561       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0713 16:44:47.351586       1 available_controller.go:423] Starting AvailableConditionController
I0713 16:44:47.351593       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0713 16:44:47.351785       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0713 16:44:47.351834       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0713 16:44:47.351854       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0713 16:44:47.351859       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0713 16:44:47.351903       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0713 16:44:47.351932       1 aggregator.go:164] waiting for initial CRD sync...
I0713 16:44:47.352149       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0713 16:44:47.352550       1 controller.go:78] Starting OpenAPI AggregationController
I0713 16:44:47.352707       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0713 16:44:47.352798       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0713 16:44:47.352828       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0713 16:44:47.352909       1 controller.go:85] Starting OpenAPI V3 controller
I0713 16:44:47.352975       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0713 16:44:47.353088       1 naming_controller.go:291] Starting NamingConditionController
I0713 16:44:47.353182       1 establishing_controller.go:76] Starting EstablishingController
I0713 16:44:47.353232       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0713 16:44:47.353266       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0713 16:44:47.353294       1 crd_finalizer.go:266] Starting CRDFinalizer
I0713 16:44:47.353325       1 controller.go:116] Starting legacy_token_tracking_controller
I0713 16:44:47.353362       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0713 16:44:47.353850       1 controller.go:134] Starting OpenAPI controller
I0713 16:44:47.354760       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0713 16:44:47.354774       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0713 16:44:47.355655       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0713 16:44:47.357573       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0713 16:44:47.380671       1 shared_informer.go:318] Caches are synced for node_authorizer
E0713 16:44:47.427912       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0713 16:44:47.451687       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0713 16:44:47.451909       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0713 16:44:47.451933       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0713 16:44:47.451954       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0713 16:44:47.452689       1 controller.go:624] quota admission added evaluator for: namespaces
I0713 16:44:47.452916       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0713 16:44:47.453411       1 shared_informer.go:318] Caches are synced for configmaps
I0713 16:44:47.454973       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0713 16:44:47.455017       1 aggregator.go:166] initial CRD sync complete...
I0713 16:44:47.455028       1 autoregister_controller.go:141] Starting autoregister controller
I0713 16:44:47.455037       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0713 16:44:47.455046       1 cache.go:39] Caches are synced for autoregister controller
I0713 16:44:47.632166       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0713 16:44:48.359105       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0713 16:44:48.364821       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0713 16:44:48.364846       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0713 16:44:48.925321       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0713 16:44:48.972715       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0713 16:44:49.063748       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0713 16:44:49.071386       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.53]
I0713 16:44:49.072798       1 controller.go:624] quota admission added evaluator for: endpoints
I0713 16:44:49.077958       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0713 16:44:49.647340       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0713 16:44:51.032838       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0713 16:44:51.063524       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0713 16:44:51.262458       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0713 16:44:53.894388       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0713 16:44:54.830089       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0713 16:45:23.668409       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0713 16:45:23.705694       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0713 16:45:23.725891       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0713 16:45:23.725927       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0713 16:45:23.758360       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0713 16:45:23.780298       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0713 16:45:23.793005       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0713 16:45:23.811471       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0713 16:45:23.811528       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0713 16:45:23.841512       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0713 16:45:23.876508       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0713 16:45:23.876569       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0713 16:45:23.925533       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0713 16:45:23.925585       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0713 16:45:23.967078       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0713 16:45:24.589784       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0713 16:45:24.589902       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0713 16:45:24.677311       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:24.677596       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:24.716088       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:24.756825       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:24.765485       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:25.050274       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:25.050438       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:25.117749       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0713 16:45:30.195085       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0713 16:45:30.773646       1 trace.go:236] Trace[451927640]: "Get" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:e48b70a6-382a-40e9-8349-b0d43ae94645,client:199.204.45.53,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-vdmh8,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (13-Jul-2026 16:45:30.225) (total time: 548ms):
Trace[451927640]: ---"About to write a response" 547ms (16:45:30.773)
Trace[451927640]: [548.050221ms] [548.050221ms] END
I0713 16:45:30.775598       1 trace.go:236] Trace[970193542]: "Create" accept:application/json,audit-id:4d9e06ad-6138-4d15-b366-e1c3a47cadad,client:199.204.45.53,protocol:HTTP/2.0,resource:jobs,scope:resource,url:/apis/batch/v1/namespaces/envoy-gateway-system/jobs,user-agent:Helm/3.11.2,verb:POST (13-Jul-2026 16:45:30.192) (total time: 582ms):
Trace[970193542]: ["Create etcd3" audit-id:4d9e06ad-6138-4d15-b366-e1c3a47cadad,key:/jobs/envoy-gateway-system/envoy-gateway-gateway-helm-certgen,type:*batch.Job,resource:jobs.batch 580ms (16:45:30.195)
Trace[970193542]:  ---"Txn call succeeded" 577ms (16:45:30.772)]
Trace[970193542]: [582.845186ms] [582.845186ms] END
I0713 16:45:31.891686       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0713 16:45:31.899943       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0713 16:45:32.095548       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0713 16:45:32.292166       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0713 16:45:32.503512       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0713 16:45:32.710966       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0713 16:45:32.900579       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0713 16:45:33.117328       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0713 16:45:35.123190       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0713 16:45:35.750222       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0713 16:45:36.113886       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0713 16:45:40.339685       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0713 16:45:40.339739       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0713 16:45:40.800123       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0713 16:45:48.429808       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.100.253.26"}
W0713 16:45:48.463143       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.100.253.26:9443: connect: connection refused
E0713 16:45:48.463281       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.100.253.26:9443: connect: connection refused
I0713 16:46:01.589497       1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager
I0713 16:46:01.600966       1 handler.go:275] Adding GroupVersion acme.cert-manager.io v1 to ResourceManager
I0713 16:46:01.616970       1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager
I0713 16:46:01.635631       1 alloc.go:330] "allocated clusterIPs" service="cert-manager/cert-manager-webhook" clusterIPs={"IPv4":"10.111.223.136"}
I0713 16:46:01.648024       1 alloc.go:330] "allocated clusterIPs" service="cert-manager/cert-manager" clusterIPs={"IPv4":"10.111.201.1"}
I0713 16:46:01.693266       1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager
I0713 16:46:01.748031       1 handler.go:275] Adding GroupVersion acme.cert-manager.io v1 to ResourceManager
I0713 16:46:01.826203       1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager
W0713 16:46:07.250194       1 dispatcher.go:217] Failed calling webhook, failing closed webhook.cert-manager.io: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/validate?timeout=30s": dial tcp 10.111.223.136:443: connect: connection refused
I0713 16:46:12.253516       1 controller.go:624] quota admission added evaluator for: certificates.cert-manager.io
I0713 16:46:17.476596       1 controller.go:624] quota admission added evaluator for: certificaterequests.cert-manager.io
I0713 16:46:30.730925       1 alloc.go:330] "allocated clusterIPs" service="ingress-nginx/ingress-nginx-defaultbackend" clusterIPs={"IPv4":"10.98.234.73"}
I0713 16:46:30.740788       1 alloc.go:330] "allocated clusterIPs" service="ingress-nginx/ingress-nginx-controller-metrics" clusterIPs={"IPv4":"10.102.103.78"}
I0713 16:46:30.750700       1 alloc.go:330] "allocated clusterIPs" service="ingress-nginx/ingress-nginx-controller-admission" clusterIPs={"IPv4":"10.99.141.191"}
I0713 16:46:30.759337       1 alloc.go:330] "allocated clusterIPs" service="ingress-nginx/ingress-nginx-controller" clusterIPs={"IPv4":"10.97.79.125"}
I0713 16:46:37.369090       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.386414       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.441486       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.459525       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.479815       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.497980       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.518094       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.540418       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.566125       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.584725       1 handler.go:275] Adding GroupVersion rabbitmq.com v1alpha1 to ResourceManager
I0713 16:46:37.619591       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.639347       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:37.662856       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:39.074629       1 handler.go:275] Adding GroupVersion rabbitmq.com v1beta1 to ResourceManager
I0713 16:46:43.131111       1 controller.go:624] quota admission added evaluator for: networkpolicies.networking.k8s.io
I0713 16:46:43.140111       1 controller.go:624] quota admission added evaluator for: poddisruptionbudgets.policy
I0713 16:46:43.200938       1 alloc.go:330] "allocated clusterIPs" service="openstack/rabbitmq-messaging-topology-operator-webhook" clusterIPs={"IPv4":"10.96.235.166"}
I0713 16:46:43.226676       1 controller.go:624] quota admission added evaluator for: issuers.cert-manager.io
I0713 16:46:45.571141       1 handler.go:275] Adding GroupVersion pxc.percona.com v1 to ResourceManager
I0713 16:46:45.602232       1 handler.go:275] Adding GroupVersion pxc.percona.com v1 to ResourceManager
I0713 16:46:46.226861       1 handler.go:275] Adding GroupVersion pxc.percona.com v1-10-0 to ResourceManager
I0713 16:46:46.226933       1 handler.go:275] Adding GroupVersion pxc.percona.com v1-11-0 to ResourceManager
I0713 16:46:46.226989       1 handler.go:275] Adding GroupVersion pxc.percona.com v1 to ResourceManager
I0713 16:46:53.581029       1 controller.go:624] quota admission added evaluator for: perconaxtradbclusters.pxc.percona.com
I0713 16:46:56.515006       1 alloc.go:330] "allocated clusterIPs" service="openstack/percona-xtradb-cluster-operator" clusterIPs={"IPv4":"10.101.206.48"}
I0713 16:46:56.892285       1 controller.go:624] quota admission added evaluator for: statefulsets.apps
I0713 16:46:57.156459       1 alloc.go:330] "allocated clusterIPs" service="openstack/percona-xtradb-haproxy" clusterIPs={"IPv4":"10.97.155.243"}
I0713 16:46:57.172552       1 alloc.go:330] "allocated clusterIPs" service="openstack/percona-xtradb-haproxy-replicas" clusterIPs={"IPv4":"10.102.48.164"}
I0713 16:47:52.035415       1 trace.go:236] Trace[497134612]: "Update" accept:application/json, */*,audit-id:77a60fb5-cebc-4fc1-b40d-2e6b2a75b989,client:10.0.0.43,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller,user-agent:cert-manager-leader-election/v1.15.5 (linux/amd64) cert-manager/e8fdbe63fd94107a83d3c9f9c134f2d222ba9cff,verb:PUT (13-Jul-2026 16:47:51.414) (total time: 620ms):
Trace[497134612]: ["GuaranteedUpdate etcd3" audit-id:77a60fb5-cebc-4fc1-b40d-2e6b2a75b989,key:/leases/cert-manager/cert-manager-controller,type:*coordination.Lease,resource:leases.coordination.k8s.io 620ms (16:47:51.414)
Trace[497134612]:  ---"Txn call completed" 619ms (16:47:52.034)]
Trace[497134612]: [620.726133ms] [620.726133ms] END
I0713 16:47:52.036361       1 trace.go:236] Trace[417808440]: "Get" accept:application/vnd.kubernetes.protobuf, */*,audit-id:1983e40d-3644-4f28-976a-b40bb583d26c,client:199.204.45.53,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-scheduler,user-agent:kube-scheduler/v1.28.13 (linux/amd64) kubernetes/024ab2a/leader-election,verb:GET (13-Jul-2026 16:47:51.400) (total time: 635ms):
Trace[417808440]: ---"About to write a response" 635ms (16:47:52.036)
Trace[417808440]: [635.73107ms] [635.73107ms] END
I0713 16:47:52.036445       1 trace.go:236] Trace[2075994467]: "Update" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:724b509a-ef33-4748-a338-ed542c7c56eb,client:10.0.0.56,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/openstack/leases/rabbitmq-cluster-operator-leader-election,user-agent:manager/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:PUT (13-Jul-2026 16:47:51.384) (total time: 651ms):
Trace[2075994467]: ["GuaranteedUpdate etcd3" audit-id:724b509a-ef33-4748-a338-ed542c7c56eb,key:/leases/openstack/rabbitmq-cluster-operator-leader-election,type:*coordination.Lease,resource:leases.coordination.k8s.io 651ms (16:47:51.385)
Trace[2075994467]:  ---"Txn call completed" 650ms (16:47:52.036)]
Trace[2075994467]: [651.527705ms] [651.527705ms] END
I0713 16:47:52.036499       1 trace.go:236] Trace[750519768]: "Get" accept:application/json, */*,audit-id:a362aee7-c668-45f0-af09-eaeba24cc734,client:199.204.45.53,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock,user-agent:cilium-operator-generic/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:GET (13-Jul-2026 16:47:51.322) (total time: 713ms):
Trace[750519768]: ---"About to write a response" 713ms (16:47:52.036)
Trace[750519768]: [713.491502ms] [713.491502ms] END
I0713 16:48:29.285912       1 alloc.go:330] "allocated clusterIPs" service="openstack/percona-xtradb-haproxy-metrics" clusterIPs={"IPv4":"10.110.129.146"}
I0713 16:49:03.048059       1 trace.go:236] Trace[717319803]: "List" accept:application/json,audit-id:0d45fba7-f0bd-4f8d-b1c1-7db2736c4d8a,client:199.204.45.53,protocol:HTTP/2.0,resource:endpoints,scope:namespace,url:/api/v1/namespaces/envoy-gateway-system/endpoints,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:LIST (13-Jul-2026 16:49:02.520) (total time: 527ms):
Trace[717319803]: ["List(recursive=true) etcd3" audit-id:0d45fba7-f0bd-4f8d-b1c1-7db2736c4d8a,key:/services/endpoints/envoy-gateway-system,resourceVersion:,resourceVersionMatch:,limit:500,continue: 527ms (16:49:02.520)]
Trace[717319803]: [527.852578ms] [527.852578ms] END
I0713 16:49:03.048272       1 trace.go:236] Trace[1974686260]: "Update" accept:application/json, */*,audit-id:2afd78a2-f94e-4ce4-8135-286feb288323,client:199.204.45.53,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock,user-agent:cilium-operator-generic/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:PUT (13-Jul-2026 16:49:02.485) (total time: 562ms):
Trace[1974686260]: ["GuaranteedUpdate etcd3" audit-id:2afd78a2-f94e-4ce4-8135-286feb288323,key:/leases/kube-system/cilium-operator-resource-lock,type:*coordination.Lease,resource:leases.coordination.k8s.io 562ms (16:49:02.485)
Trace[1974686260]:  ---"Txn call completed" 561ms (16:49:03.047)]
Trace[1974686260]: [562.274085ms] [562.274085ms] END
I0713 16:49:03.048082       1 trace.go:236] Trace[224022934]: "Get" accept:application/json,audit-id:6a77b969-f598-42a2-a62b-948b68934520,client:199.204.45.53,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/cert-manager/secrets/cert-manager-webhook-ca,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (13-Jul-2026 16:49:02.532) (total time: 515ms):
Trace[224022934]: ---"About to write a response" 515ms (16:49:03.047)
Trace[224022934]: [515.727409ms] [515.727409ms] END
I0713 16:49:03.048373       1 trace.go:236] Trace[1353378048]: "List" accept:application/json,audit-id:9fa0201c-9707-4f62-8aa2-8eba18f0a048,client:199.204.45.53,protocol:HTTP/2.0,resource:cronjobs,scope:namespace,url:/apis/batch/v1/namespaces/ingress-nginx/cronjobs,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:LIST (13-Jul-2026 16:49:02.503) (total time: 544ms):
Trace[1353378048]: ["List(recursive=true) etcd3" audit-id:9fa0201c-9707-4f62-8aa2-8eba18f0a048,key:/cronjobs/ingress-nginx,resourceVersion:,resourceVersionMatch:,limit:500,continue: 544ms (16:49:02.504)]
Trace[1353378048]: [544.314463ms] [544.314463ms] END
I0713 16:49:07.813119       1 trace.go:236] Trace[2141796285]: "Update" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:489e6dd1-3558-4cae-9ba1-2f9bda5058d6,client:199.204.45.53,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/instance,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PUT (13-Jul-2026 16:49:06.949) (total time: 863ms):
Trace[2141796285]: ["GuaranteedUpdate etcd3" audit-id:489e6dd1-3558-4cae-9ba1-2f9bda5058d6,key:/leases/kube-node-lease/instance,type:*coordination.Lease,resource:leases.coordination.k8s.io 862ms (16:49:06.950)
Trace[2141796285]:  ---"Txn call completed" 861ms (16:49:07.812)]
Trace[2141796285]: [863.086986ms] [863.086986ms] END
I0713 16:49:07.819536       1 trace.go:236] Trace[671822121]: "Update" accept:application/json, */*,audit-id:7efc39fa-ec19-4782-bcf9-460f1bd2852d,client:10.0.0.43,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller,user-agent:cert-manager-leader-election/v1.15.5 (linux/amd64) cert-manager/e8fdbe63fd94107a83d3c9f9c134f2d222ba9cff,verb:PUT (13-Jul-2026 16:49:07.071) (total time: 748ms):
Trace[671822121]: ["GuaranteedUpdate etcd3" audit-id:7efc39fa-ec19-4782-bcf9-460f1bd2852d,key:/leases/cert-manager/cert-manager-controller,type:*coordination.Lease,resource:leases.coordination.k8s.io 747ms (16:49:07.071)
Trace[671822121]:  ---"Txn call completed" 746ms (16:49:07.819)]
Trace[671822121]: [748.154279ms] [748.154279ms] END
I0713 16:49:07.819595       1 trace.go:236] Trace[2136481748]: "Update" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:8ad12cef-ba95-4f90-8d9e-052297cd2fc2,client:10.0.0.93,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/openstack/leases/08db1feb.percona.com,user-agent:percona-xtradb-cluster-operator/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:PUT (13-Jul-2026 16:49:07.315) (total time: 504ms):
Trace[2136481748]: ["GuaranteedUpdate etcd3" audit-id:8ad12cef-ba95-4f90-8d9e-052297cd2fc2,key:/leases/openstack/08db1feb.percona.com,type:*coordination.Lease,resource:leases.coordination.k8s.io 503ms (16:49:07.315)
Trace[2136481748]:  ---"Txn call completed" 502ms (16:49:07.819)]
Trace[2136481748]: [504.068283ms] [504.068283ms] END
I0713 16:49:07.819807       1 trace.go:236] Trace[1114083333]: "List" accept:application/json,audit-id:a14fb104-36eb-4daa-8483-07eb4ee6748b,client:199.204.45.53,protocol:HTTP/2.0,resource:persistentvolumeclaims,scope:namespace,url:/api/v1/namespaces/kube-system/persistentvolumeclaims,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:LIST (13-Jul-2026 16:49:07.092) (total time: 727ms):
Trace[1114083333]: ["List(recursive=true) etcd3" audit-id:a14fb104-36eb-4daa-8483-07eb4ee6748b,key:/persistentvolumeclaims/kube-system,resourceVersion:,resourceVersionMatch:,limit:500,continue: 727ms (16:49:07.092)]
Trace[1114083333]: [727.163332ms] [727.163332ms] END
I0713 16:49:07.820149       1 trace.go:236] Trace[1898667665]: "List" accept:application/json,audit-id:dedbfc28-2364-47b9-9cb6-b8a78e9cb80f,client:199.204.45.53,protocol:HTTP/2.0,resource:endpoints,scope:namespace,url:/api/v1/namespaces/local-path-storage/endpoints,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:LIST (13-Jul-2026 16:49:06.960) (total time: 859ms):
Trace[1898667665]: ["List(recursive=true) etcd3" audit-id:dedbfc28-2364-47b9-9cb6-b8a78e9cb80f,key:/services/endpoints/local-path-storage,resourceVersion:,resourceVersionMatch:,limit:500,continue: 859ms (16:49:06.960)]
Trace[1898667665]: [859.265043ms] [859.265043ms] END
I0713 16:49:07.820278       1 trace.go:236] Trace[229071061]: "Get" accept:application/json, */*,audit-id:ae03f57e-eb36-4cbf-950d-a89a3f4d59ca,client:199.204.45.53,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock,user-agent:cilium-operator-generic/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:GET (13-Jul-2026 16:49:07.061) (total time: 758ms):
Trace[229071061]: ---"About to write a response" 758ms (16:49:07.820)
Trace[229071061]: [758.303449ms] [758.303449ms] END
I0713 16:49:07.820587       1 trace.go:236] Trace[479751571]: "Update" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:3286c363-ba9a-420e-8231-285a7f8fb7f6,client:10.0.0.84,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/envoy-gateway-system/leases/5b9825d2.gateway.envoyproxy.io,user-agent:envoy-gateway/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:PUT (13-Jul-2026 16:49:07.315) (total time: 504ms):
Trace[479751571]: ["GuaranteedUpdate etcd3" audit-id:3286c363-ba9a-420e-8231-285a7f8fb7f6,key:/leases/envoy-gateway-system/5b9825d2.gateway.envoyproxy.io,type:*coordination.Lease,resource:leases.coordination.k8s.io 504ms (16:49:07.316)
Trace[479751571]:  ---"Txn call completed" 503ms (16:49:07.820)]
Trace[479751571]: [504.707298ms] [504.707298ms] END
I0713 16:49:07.820682       1 trace.go:236] Trace[1639302468]: "Get" accept:application/json,audit-id:58ea0e9c-e642-48f0-bdda-b6b91a5f4ffb,client:199.204.45.53,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/envoy-rate-limit,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (13-Jul-2026 16:49:07.039) (total time: 781ms):
Trace[1639302468]: ---"About to write a response" 781ms (16:49:07.820)
Trace[1639302468]: [781.390547ms] [781.390547ms] END
I0713 16:49:07.858016       1 trace.go:236] Trace[1253864472]: "Get" accept:application/json,audit-id:f4f1f73f-856d-441d-9137-d456c3df9be6,client:199.204.45.53,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:kubectl/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (13-Jul-2026 16:49:07.181) (total time: 676ms):
Trace[1253864472]: ---"About to write a response" 648ms (16:49:07.829)
Trace[1253864472]: [676.578937ms] [676.578937ms] END