I0423 16:57:40.104671       1 options.go:220] external host was not specified, using 199.19.213.67
I0423 16:57:40.105473       1 server.go:148] Version: v1.28.13
I0423 16:57:40.105533       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0423 16:57:40.754116       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0423 16:57:40.761213       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0423 16:57:40.761233       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0423 16:57:40.761405       1 instance.go:298] Using reconciler: lease
I0423 16:57:40.798107       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0423 16:57:40.798127       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0423 16:57:41.032737       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0423 16:57:41.032902       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0423 16:57:41.438168       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0423 16:57:41.456575       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0423 16:57:41.456597       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.456603       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.456945       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0423 16:57:41.456956       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0423 16:57:41.457583       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0423 16:57:41.458175       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0423 16:57:41.458187       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0423 16:57:41.458190       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0423 16:57:41.459342       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0423 16:57:41.459353       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0423 16:57:41.460126       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0423 16:57:41.460139       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.460143       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.460749       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0423 16:57:41.460764       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.460805       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0423 16:57:41.461262       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0423 16:57:41.462930       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0423 16:57:41.462946       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.462952       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.463468       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0423 16:57:41.463485       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.463489       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.464473       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0423 16:57:41.464492       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0423 16:57:41.466425       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0423 16:57:41.466439       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.466444       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.466862       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0423 16:57:41.466884       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.466889       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.468793       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0423 16:57:41.468808       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.468812       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.469975       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0423 16:57:41.471401       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0423 16:57:41.471414       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.471418       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.475481       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0423 16:57:41.475495       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0423 16:57:41.475499       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0423 16:57:41.476584       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0423 16:57:41.476597       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0423 16:57:41.476601       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0423 16:57:41.477108       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0423 16:57:41.477121       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0423 16:57:41.514709       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0423 16:57:41.514748       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0423 16:57:41.899995       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0423 16:57:41.900006       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0423 16:57:41.900216       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0423 16:57:41.900540       1 secure_serving.go:213] Serving securely on [::]:6443
I0423 16:57:41.900595       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0423 16:57:41.900657       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0423 16:57:41.900685       1 controller.go:78] Starting OpenAPI AggregationController
I0423 16:57:41.900730       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0423 16:57:41.900797       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0423 16:57:41.901067       1 available_controller.go:423] Starting AvailableConditionController
I0423 16:57:41.901078       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0423 16:57:41.901282       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0423 16:57:41.901322       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0423 16:57:41.901423       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0423 16:57:41.901450       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0423 16:57:41.901457       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0423 16:57:41.901579       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0423 16:57:41.902067       1 aggregator.go:164] waiting for initial CRD sync...
I0423 16:57:41.902092       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0423 16:57:41.902103       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0423 16:57:41.911035       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0423 16:57:41.911080       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0423 16:57:41.911207       1 controller.go:116] Starting legacy_token_tracking_controller
I0423 16:57:41.911246       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0423 16:57:41.911372       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0423 16:57:41.911434       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0423 16:57:41.911534       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0423 16:57:41.916721       1 controller.go:134] Starting OpenAPI controller
I0423 16:57:41.917174       1 establishing_controller.go:76] Starting EstablishingController
I0423 16:57:41.918780       1 naming_controller.go:291] Starting NamingConditionController
I0423 16:57:41.918405       1 crd_finalizer.go:266] Starting CRDFinalizer
I0423 16:57:41.918417       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0423 16:57:41.918424       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0423 16:57:41.918673       1 controller.go:85] Starting OpenAPI V3 controller
I0423 16:57:41.954955       1 shared_informer.go:318] Caches are synced for node_authorizer
E0423 16:57:41.983956       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0423 16:57:42.001138       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0423 16:57:42.001378       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0423 16:57:42.001398       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0423 16:57:42.001558       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0423 16:57:42.002303       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0423 16:57:42.002348       1 aggregator.go:166] initial CRD sync complete...
I0423 16:57:42.002359       1 autoregister_controller.go:141] Starting autoregister controller
I0423 16:57:42.002369       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0423 16:57:42.002377       1 cache.go:39] Caches are synced for autoregister controller
I0423 16:57:42.002949       1 controller.go:624] quota admission added evaluator for: namespaces
I0423 16:57:42.012069       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0423 16:57:42.012098       1 shared_informer.go:318] Caches are synced for configmaps
I0423 16:57:42.187975       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0423 16:57:42.912153       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0423 16:57:42.916692       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0423 16:57:42.916715       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0423 16:57:43.457278       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0423 16:57:43.502188       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0423 16:57:43.613946       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0423 16:57:43.620129       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.67]
I0423 16:57:43.621461       1 controller.go:624] quota admission added evaluator for: endpoints
I0423 16:57:43.625685       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0423 16:57:45.020572       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0423 16:57:45.032010       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0423 16:57:45.133992       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0423 16:57:45.320334       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0423 16:57:50.444091       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0423 16:57:51.349633       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0423 16:58:07.068032       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0423 16:58:07.081807       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0423 16:58:07.097026       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0423 16:58:07.195797       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0423 16:58:07.220921       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0423 16:58:07.220980       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0423 16:58:07.257842       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0423 16:58:07.283877       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0423 16:58:07.283920       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0423 16:58:07.320209       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0423 16:58:07.320267       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0423 16:58:07.413539       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0423 16:58:07.413574       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0423 16:58:07.416712       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0423 16:58:07.438169       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0423 16:58:07.546400       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:07.603855       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:07.932037       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0423 16:58:07.932103       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0423 16:58:07.991869       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:08.037898       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:08.060475       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:08.532428       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:08.578382       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:08.645997       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0423 16:58:13.731309       1 trace.go:236] Trace[2013211327]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:a2d6b587-9d65-4d5d-8d7f-2e3f66a6077c,client:199.19.213.67,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-zg7qk/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (23-Apr-2026 16:58:13.215) (total time: 515ms):
Trace[2013211327]: ["GuaranteedUpdate etcd3" audit-id:a2d6b587-9d65-4d5d-8d7f-2e3f66a6077c,key:/pods/kube-system/cilium-zg7qk,type:*core.Pod,resource:pods 515ms (16:58:13.215)
Trace[2013211327]:  ---"Txn call completed" 482ms (16:58:13.728)]
Trace[2013211327]: ---"About to check admission control" 28ms (16:58:13.244)
Trace[2013211327]: ---"Object stored in database" 484ms (16:58:13.728)
Trace[2013211327]: [515.818591ms] [515.818591ms] END
I0423 16:58:14.267815       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0423 16:58:15.085064       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0423 16:58:15.271076       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0423 16:58:15.479491       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0423 16:58:15.669977       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0423 16:58:15.876638       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0423 16:58:16.073742       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0423 16:58:16.300424       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0423 16:58:16.488936       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0423 16:58:16.665016       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0423 16:58:18.892839       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0423 16:58:19.283621       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0423 16:58:20.098746       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0423 16:58:20.098786       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0423 16:58:23.545095       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0423 16:58:31.422595       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.106.240.35"}
W0423 16:58:31.450081       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.106.240.35:9443: connect: connection refused
E0423 16:58:31.450128       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.106.240.35:9443: connect: connection refused
I0423 17:02:12.838956       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-provisioner-http-metrics" clusterIPs={"IPv4":"10.105.67.120"}
I0423 17:02:12.847128       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-nodeplugin-http-metrics" clusterIPs={"IPv4":"10.100.54.170"}