apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-10T01:18:38Z" generateName: cilium-operator-869df985b8- labels: app.kubernetes.io/name: cilium-operator app.kubernetes.io/part-of: cilium io.cilium/app: operator name: cilium-operator pod-template-hash: 869df985b8 name: cilium-operator-869df985b8-95pp4 namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: cilium-operator-869df985b8 uid: 948da190-a895-4b48-90dd-d487ed763cd9 resourceVersion: "25630" uid: 86c45e97-b054-4718-839b-ca5ac4daea40 spec: affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchLabels: io.cilium/app: operator topologyKey: kubernetes.io/hostname automountServiceAccountToken: true containers: - args: - --config-dir=/tmp/cilium/config-map - --debug=$(CILIUM_DEBUG) command: - cilium-operator-generic env: - name: K8S_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: CILIUM_K8S_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: CILIUM_DEBUG valueFrom: configMapKeyRef: key: debug name: cilium-config optional: true image: harbor.atmosphere.dev/quay.io/cilium/operator-generic:v1.14.8 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: host: 127.0.0.1 path: /healthz port: 9234 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 3 name: cilium-operator readinessProbe: failureThreshold: 5 httpGet: host: 127.0.0.1 path: /healthz port: 9234 scheme: HTTP periodSeconds: 5 successThreshold: 1 timeoutSeconds: 3 resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/cilium/config-map name: cilium-config-path readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rrnhr readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: instance nodeSelector: kubernetes.io/os: linux node-role.kubernetes.io/control-plane: "" preemptionPolicy: PreemptLowerPriority priority: 2000000000 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: cilium-operator serviceAccountName: cilium-operator terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - configMap: defaultMode: 420 name: cilium-config name: cilium-config-path - name: kube-api-access-rrnhr projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-10T01:18:38Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-10T02:12:04Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-10T02:12:04Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-10T01:18:38Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://5734158740e0095a1415c2736fb4c6c5cbff189dfa8e1bd88fb424eca762643d image: harbor.atmosphere.dev/quay.io/cilium/operator-generic:v1.14.8 imageID: harbor.atmosphere.dev/quay.io/cilium/operator-generic@sha256:56d373c12483c09964a00a29246595917603a077a298aa90a98e4de32c86b7dc lastState: terminated: containerID: containerd://c6cc92c000fc4a04e01ebb20b7c28e153c7b5a0d0bf93d06f97a2b9e24e93775 exitCode: 2 finishedAt: "2026-06-10T02:11:29Z" message: | m_endpoint.go:118: failed to list *v2.CiliumEndpoint: Get \"https://10.96.0.1:443/apis/cilium.io/v2/ciliumendpoints?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=warning msg="github.com/cilium/cilium/operator/watchers/node.go:101: failed to list *v1.Node: Get \"https://10.96.0.1:443/api/v1/nodes?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=warning msg="github.com/cilium/cilium/operator/watchers/cilium_endpoint.go:118: failed to list *v2.CiliumEndpoint: Get \"https://10.96.0.1:443/apis/cilium.io/v2/ciliumendpoints?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2alpha1.CiliumLoadBalancerIPPool: Get \"https://10.96.0.1:443/apis/cilium.io/v2alpha1/ciliumloadbalancerippools?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=warning msg="github.com/cilium/cilium/operator/watchers/node.go:101: failed to list *v1.Node: Get \"https://10.96.0.1:443/api/v1/nodes?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=warning msg="Network status error received, restarting client connections" error="Get \"https://10.96.0.1:443/healthz\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=k8s-client level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2alpha1.CiliumLoadBalancerIPPool: Get \"https://10.96.0.1:443/apis/cilium.io/v2alpha1/ciliumloadbalancerippools?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=warning msg="github.com/cilium/cilium/operator/watchers/cilium_endpoint.go:118: failed to list *v2.CiliumEndpoint: Get \"https://10.96.0.1:443/apis/cilium.io/v2/ciliumendpoints?limit=500&resourceVersion=0\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog reason: Error startedAt: "2026-06-10T02:09:59Z" name: cilium-operator ready: true restartCount: 2 started: true state: running: startedAt: "2026-06-10T02:11:53Z" hostIP: 199.204.45.65 phase: Running podIP: 199.204.45.65 podIPs: - ip: 199.204.45.65 qosClass: BestEffort startTime: "2026-06-10T01:18:38Z"