2026-05-27T14:02:20.060Z INFO config-loader loader/configloader.go:119 running hook 2026-05-27T14:02:20.060Z INFO config-loader loader/configloader.go:55 watching for changes to the EnvoyGateway configuration {"path": "/config/envoy-gateway.yaml"} 2026-05-27T14:02:20.060Z INFO cmd/server.go:69 Start runners 2026-05-27T14:02:20.061Z INFO cmd/server.go:303 Starting runner {"name": "traces"} 2026-05-27T14:02:20.061Z INFO cmd/server.go:303 Starting runner {"name": "provider"} 2026-05-27T14:02:20.084Z INFO provider.controller-runtime.webhook webhook/server.go:183 Registering webhook {"runner": "provider", "path": "/inject-pod-topology"} 2026-05-27T14:02:20.084Z INFO provider kubernetes/controller.go:203 created gatewayapi controller {"runner": "provider"} 2026-05-27T14:02:20.088Z INFO provider kubernetes/controller.go:2117 XListenerSet API disabled, skipping XListenerSet watch {"runner": "provider"} 2026-05-27T14:02:20.094Z INFO provider kubernetes/controller.go:2297 ServiceImport CRD not found, skipping ServiceImport watch {"runner": "provider"} 2026-05-27T14:02:20.095Z INFO provider kubernetes/controller.go:2344 Backend API disabled, skipping Backend watch {"runner": "provider"} 2026-05-27T14:02:20.109Z INFO provider kubernetes/controller.go:2673 Watching gatewayAPI related objects {"runner": "provider"} 2026-05-27T14:02:20.115Z INFO provider kubernetes/controller_watch.go:32 Skipping watch {"runner": "provider", "kind": "ClusterTrustBundle", "groupVersion": "certificates.k8s.io/v1beta1"} 2026-05-27T14:02:20.116Z INFO provider runner/runner.go:68 Running provider {"runner": "provider", "type": "Kubernetes"} 2026-05-27T14:02:20.116Z INFO cmd/server.go:303 Starting runner {"name": "gateway-api"} 2026-05-27T14:02:20.117Z INFO provider.controller-runtime.metrics server/server.go:208 Starting metrics server {"runner": "provider"} 2026-05-27T14:02:20.118Z INFO provider.controller-runtime.metrics server/server.go:247 Serving metrics server {"runner": "provider", "bindAddress": ":8080", "secure": false} 2026-05-27T14:02:20.118Z INFO gateway-api runner/runner.go:105 started {"runner": "gateway-api"} 2026-05-27T14:02:20.118Z INFO provider manager/server.go:83 starting server {"runner": "provider", "name": "health probe", "addr": "[::]:8081"} 2026-05-27T14:02:20.118Z INFO cmd/server.go:303 Starting runner {"name": "xds"} 2026-05-27T14:02:20.118Z INFO provider.controller-runtime.webhook webhook/server.go:191 Starting webhook server {"runner": "provider"} 2026-05-27T14:02:20.123Z INFO provider.controller-runtime.certwatcher certwatcher/certwatcher.go:214 Updated current TLS certificate {"runner": "provider", "cert": "/certs/tls.crt", "key": "/certs/tls.key"} 2026-05-27T14:02:20.123Z INFO provider.controller-runtime.webhook webhook/server.go:242 Serving webhook server {"runner": "provider", "host": "", "port": 9443} 2026-05-27T14:02:20.123Z INFO xds runner/runner.go:162 loaded TLS certificate and key {"runner": "xds"} 2026-05-27T14:02:20.123Z INFO provider.controller-runtime.certwatcher certwatcher/certwatcher.go:136 Starting certificate poll+watcher {"runner": "provider", "cert": "/certs/tls.crt", "key": "/certs/tls.key", "interval": "10s"} 2026-05-27T14:02:20.123Z INFO xds runner/runner.go:168 configured gRPC keepalive {"runner": "xds", "maxConnectionAge": "10h0m0s", "maxConnectionAgeGrace": "2m0s"} 2026-05-27T14:02:20.124Z INFO xds runner/runner.go:220 started {"runner": "xds"} 2026-05-27T14:02:20.124Z INFO cmd/server.go:303 Starting runner {"name": "infrastructure"} 2026-05-27T14:02:20.124Z INFO cmd/server.go:303 Starting runner {"name": "admin"} 2026-05-27T14:02:20.124Z INFO admin admin/server.go:70 starting admin server {"address": "127.0.0.1:19000", "enablePprof": false, "enableConsole": true} 2026-05-27T14:02:20.124Z INFO cmd/server.go:303 Starting runner {"name": "metrics"} 2026-05-27T14:02:20.124Z INFO metrics metrics/register.go:202 initialized metrics pull endpoint {"address": "0.0.0.0:19001", "endpoint": "/metrics"} 2026-05-27T14:02:20.124Z INFO metrics metrics/register.go:83 starting metrics server {"address": "0.0.0.0:19001"} 2026-05-27T14:02:20.125Z INFO wasm-cache wasm/httpserver.go:114 Listening on :18002 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha1.EnvoyProxy"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "*kubernetes.watchAndReconcileSource"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.ConfigMap"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha2.UDPRoute"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1beta1.ReferenceGrant"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.Service"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.GRPCRoute"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.Deployment"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.Gateway"} 2026-05-27T14:02:20.222Z INFO provider leaderelection/leaderelection.go:258 Attempting to acquire leader lease... {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha3.TLSRoute"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha1.HTTPRouteFilter"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.DaemonSet"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.EndpointSlice"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.HTTPRoute"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha2.TCPRoute"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha1.SecurityPolicy"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha1.ClientTrafficPolicy"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha1.BackendTrafficPolicy"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.Node"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.Secret"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.BackendTLSPolicy"} 2026-05-27T14:02:20.223Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1alpha1.EnvoyExtensionPolicy"} 2026-05-27T14:02:20.222Z INFO provider controller/controller.go:370 Starting EventSource {"runner": "provider", "controller": "gatewayapi-1779890540", "source": "kind source: *v1.GatewayClass"} 2026-05-27T14:02:20.325Z INFO provider kubernetes/predicates.go:45 gatewayclass has matching controller name, processing {"runner": "provider", "name": "eg"} 2026-05-27T14:02:20.426Z INFO provider controller/controller.go:303 Starting Controller {"runner": "provider", "controller": "gatewayapi-1779890540"} 2026-05-27T14:02:20.426Z INFO provider controller/controller.go:306 Starting workers {"runner": "provider", "controller": "gatewayapi-1779890540", "worker count": 1} 2026-05-27T14:02:20.426Z INFO provider kubernetes/controller.go:318 reconciling gateways {"runner": "provider", "trace_id": "1a19f1dcd6815745dd7e7506166a749b", "span_id": "cf900ff1913ff40b"} 2026-05-27T14:02:20.426Z INFO provider kubernetes/controller.go:1209 processing OIDC HMAC Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy-oidc-hmac"} 2026-05-27T14:02:20.427Z INFO provider kubernetes/controller.go:1231 processing Envoy TLS Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy"} 2026-05-27T14:02:20.528Z INFO provider kubernetes/controller.go:564 No gateways found for accepted GatewayClass {"runner": "provider", "trace_id": "1a19f1dcd6815745dd7e7506166a749b", "span_id": "cf900ff1913ff40b", "GatewayClass": "eg"} 2026-05-27T14:02:20.528Z INFO provider kubernetes/controller.go:607 reconciled gateways successfully {"runner": "provider", "trace_id": "1a19f1dcd6815745dd7e7506166a749b", "span_id": "cf900ff1913ff40b"} 2026-05-27T14:02:20.529Z INFO gateway-api runner/runner.go:153 received an update {"runner": "gateway-api", "trace_id": "1a19f1dcd6815745dd7e7506166a749b", "span_id": "0338620df627b1cb", "key": "gateway.envoyproxy.io/gatewayclass-controller"} 2026-05-27T14:02:20.810Z INFO provider kubernetes/controller.go:318 reconciling gateways {"runner": "provider", "trace_id": "3488729108d077c77bc31f5f930977ac", "span_id": "6257eba0f51ff6c5"} 2026-05-27T14:02:20.810Z INFO provider kubernetes/controller.go:1209 processing OIDC HMAC Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy-oidc-hmac"} 2026-05-27T14:02:20.810Z INFO provider kubernetes/controller.go:1231 processing Envoy TLS Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy"} 2026-05-27T14:02:20.810Z INFO provider kubernetes/controller.go:564 No gateways found for accepted GatewayClass {"runner": "provider", "trace_id": "3488729108d077c77bc31f5f930977ac", "span_id": "6257eba0f51ff6c5", "GatewayClass": "eg"} 2026-05-27T14:02:20.810Z INFO provider kubernetes/controller.go:607 reconciled gateways successfully {"runner": "provider", "trace_id": "3488729108d077c77bc31f5f930977ac", "span_id": "6257eba0f51ff6c5"} 2026-05-27T14:02:23.518Z INFO provider kubernetes/controller.go:318 reconciling gateways {"runner": "provider", "trace_id": "039956db85603f81f867a6887a4ea36f", "span_id": "7e231c6877256a2c"} 2026-05-27T14:02:23.518Z INFO provider kubernetes/controller.go:1209 processing OIDC HMAC Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy-oidc-hmac"} 2026-05-27T14:02:23.518Z INFO provider kubernetes/controller.go:1231 processing Envoy TLS Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy"} 2026-05-27T14:02:23.518Z INFO provider kubernetes/controller.go:564 No gateways found for accepted GatewayClass {"runner": "provider", "trace_id": "039956db85603f81f867a6887a4ea36f", "span_id": "7e231c6877256a2c", "GatewayClass": "eg"} 2026-05-27T14:02:23.518Z INFO provider kubernetes/controller.go:607 reconciled gateways successfully {"runner": "provider", "trace_id": "039956db85603f81f867a6887a4ea36f", "span_id": "7e231c6877256a2c"} 2026-05-27T14:02:23.711Z INFO provider kubernetes/controller.go:318 reconciling gateways {"runner": "provider", "trace_id": "d50215412f888420647ab939c7c31c1b", "span_id": "ca4bf8596199d766"} 2026-05-27T14:02:23.712Z INFO provider kubernetes/controller.go:1209 processing OIDC HMAC Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy-oidc-hmac"} 2026-05-27T14:02:23.712Z INFO provider kubernetes/controller.go:1231 processing Envoy TLS Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy"} 2026-05-27T14:02:23.712Z INFO provider kubernetes/controller.go:564 No gateways found for accepted GatewayClass {"runner": "provider", "trace_id": "d50215412f888420647ab939c7c31c1b", "span_id": "ca4bf8596199d766", "GatewayClass": "eg"} 2026-05-27T14:02:23.712Z INFO provider kubernetes/controller.go:607 reconciled gateways successfully {"runner": "provider", "trace_id": "d50215412f888420647ab939c7c31c1b", "span_id": "ca4bf8596199d766"} 2026-05-27T14:02:23.750Z INFO provider kubernetes/controller.go:318 reconciling gateways {"runner": "provider", "trace_id": "e46c6fe6f814166426ad90373c73c5e9", "span_id": "d5f47576821710df"} 2026-05-27T14:02:23.750Z INFO provider kubernetes/controller.go:1209 processing OIDC HMAC Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy-oidc-hmac"} 2026-05-27T14:02:23.750Z INFO provider kubernetes/controller.go:1231 processing Envoy TLS Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy"} 2026-05-27T14:02:23.750Z INFO provider kubernetes/controller.go:564 No gateways found for accepted GatewayClass {"runner": "provider", "trace_id": "e46c6fe6f814166426ad90373c73c5e9", "span_id": "d5f47576821710df", "GatewayClass": "eg"} 2026-05-27T14:02:23.750Z INFO provider kubernetes/controller.go:607 reconciled gateways successfully {"runner": "provider", "trace_id": "e46c6fe6f814166426ad90373c73c5e9", "span_id": "d5f47576821710df"} 2026-05-27T14:02:42.289Z ERROR provider leaderelection/leaderelection.go:488 Failed to update lease {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/envoy-gateway-system/leases/5b9825d2.gateway.envoyproxy.io?timeout=5s\": context deadline exceeded"} 2026-05-27T14:02:50.562Z ERROR provider leaderelection/leaderelection.go:452 Error retrieving lease lock {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io 5b9825d2.gateway.envoyproxy.io)"} 2026-05-27T14:02:59.719Z ERROR provider leaderelection/leaderelection.go:452 Error retrieving lease lock {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/envoy-gateway-system/leases/5b9825d2.gateway.envoyproxy.io?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"} 2026-05-27T14:03:08.378Z ERROR provider leaderelection/leaderelection.go:452 Error retrieving lease lock {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/envoy-gateway-system/leases/5b9825d2.gateway.envoyproxy.io?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"} 2026-05-27T14:03:17.496Z ERROR provider leaderelection/leaderelection.go:452 Error retrieving lease lock {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io 5b9825d2.gateway.envoyproxy.io)"} 2026-05-27T14:03:29.389Z ERROR provider leaderelection/leaderelection.go:488 Failed to update lease {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/envoy-gateway-system/leases/5b9825d2.gateway.envoyproxy.io?timeout=5s\": context deadline exceeded"} 2026-05-27T14:03:36.880Z ERROR provider leaderelection/leaderelection.go:445 Failed to update lease optimistically, falling back to slow path {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io", "error": "Operation cannot be fulfilled on leases.coordination.k8s.io \"5b9825d2.gateway.envoyproxy.io\": the object has been modified; please apply your changes to the latest version and try again"} 2026-05-27T14:03:38.319Z INFO provider leaderelection/leaderelection.go:272 Successfully acquired lease {"runner": "provider", "lock": "envoy-gateway-system/5b9825d2.gateway.envoyproxy.io"} 2026-05-27T14:03:38.320Z INFO provider kubernetes/status_updater.go:132 started status update handler {"runner": "provider"} 2026-05-27T14:03:38.320Z INFO provider kubernetes/controller.go:216 started {"runner": "provider"} 2026-05-27T14:03:38.320Z INFO provider kubernetes/controller.go:318 reconciling gateways {"runner": "provider", "trace_id": "126fcc8c2f8256c2d960d321c4e111fe", "span_id": "d7e63f33b395103f"} 2026-05-27T14:03:38.320Z INFO infrastructure runner/runner.go:78 started {"runner": "infrastructure"} 2026-05-27T14:03:38.320Z INFO provider kubernetes/controller.go:1209 processing OIDC HMAC Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy-oidc-hmac"} 2026-05-27T14:03:38.320Z INFO provider kubernetes/status_updater.go:143 received a status update {"runner": "provider", "namespace": "", "name": "eg", "kind": "GatewayClass"} 2026-05-27T14:03:38.320Z INFO provider kubernetes/controller.go:1231 processing Envoy TLS Secret {"runner": "provider", "namespace": "envoy-gateway-system", "name": "envoy"} 2026-05-27T14:03:38.321Z INFO provider kubernetes/status_updater.go:108 status unchanged, bypassing update {"runner": "provider", "name": "eg", "namespace": "", "kind": "GatewayClass"} 2026-05-27T14:03:38.321Z INFO provider kubernetes/controller.go:564 No gateways found for accepted GatewayClass {"runner": "provider", "trace_id": "126fcc8c2f8256c2d960d321c4e111fe", "span_id": "d7e63f33b395103f", "GatewayClass": "eg"} 2026-05-27T14:03:38.321Z INFO provider kubernetes/controller.go:607 reconciled gateways successfully {"runner": "provider", "trace_id": "126fcc8c2f8256c2d960d321c4e111fe", "span_id": "d7e63f33b395103f"}