I0505 07:42:55.779871 1 options.go:220] external host was not specified, using 199.204.45.250 I0505 07:42:55.781287 1 server.go:148] Version: v1.28.13 I0505 07:42:55.781365 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0505 07:42:56.392688 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0505 07:42:56.417194 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0505 07:42:56.417215 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0505 07:42:56.417440 1 instance.go:298] Using reconciler: lease I0505 07:42:56.462226 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0505 07:42:56.462247 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0505 07:42:56.736840 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0505 07:42:56.737011 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0505 07:42:57.160223 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0505 07:42:57.179479 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0505 07:42:57.179506 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.179512 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.179913 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0505 07:42:57.179924 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0505 07:42:57.180585 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0505 07:42:57.181148 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0505 07:42:57.181161 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0505 07:42:57.181165 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0505 07:42:57.182217 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0505 07:42:57.182232 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0505 07:42:57.182928 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0505 07:42:57.182941 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.182944 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.183439 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0505 07:42:57.183453 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.183481 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0505 07:42:57.183982 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0505 07:42:57.185466 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0505 07:42:57.185481 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.185485 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.185929 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0505 07:42:57.185943 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.185947 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.186700 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0505 07:42:57.186714 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0505 07:42:57.188151 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0505 07:42:57.188164 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.188169 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.188719 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0505 07:42:57.188734 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.188738 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.190523 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0505 07:42:57.190538 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.190542 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.191543 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0505 07:42:57.192935 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0505 07:42:57.192953 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.192957 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.196476 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0505 07:42:57.196492 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0505 07:42:57.196496 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0505 07:42:57.197420 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0505 07:42:57.197437 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0505 07:42:57.197442 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0505 07:42:57.198279 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0505 07:42:57.198298 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0505 07:42:57.234641 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0505 07:42:57.234671 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0505 07:42:57.634796 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0505 07:42:57.634817 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0505 07:42:57.635107 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0505 07:42:57.635312 1 secure_serving.go:213] Serving securely on [::]:6443 I0505 07:42:57.635353 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0505 07:42:57.635445 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0505 07:42:57.635670 1 gc_controller.go:78] Starting apiserver lease garbage collector I0505 07:42:57.635673 1 gc_controller.go:78] Starting apiserver lease garbage collector I0505 07:42:57.635983 1 controller.go:116] Starting legacy_token_tracking_controller I0505 07:42:57.635998 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0505 07:42:57.636182 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0505 07:42:57.636454 1 controller.go:78] Starting OpenAPI AggregationController I0505 07:42:57.636457 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0505 07:42:57.636609 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0505 07:42:57.636476 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0505 07:42:57.636703 1 available_controller.go:423] Starting AvailableConditionController I0505 07:42:57.636722 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0505 07:42:57.636747 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0505 07:42:57.636758 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0505 07:42:57.636780 1 aggregator.go:164] waiting for initial CRD sync... I0505 07:42:57.636796 1 system_namespaces_controller.go:67] Starting system namespaces controller I0505 07:42:57.636492 1 controller.go:80] Starting OpenAPI V3 AggregationController I0505 07:42:57.637364 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0505 07:42:57.637451 1 controller.go:134] Starting OpenAPI controller I0505 07:42:57.637493 1 controller.go:85] Starting OpenAPI V3 controller I0505 07:42:57.637521 1 naming_controller.go:291] Starting NamingConditionController I0505 07:42:57.637535 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0505 07:42:57.637563 1 establishing_controller.go:76] Starting EstablishingController I0505 07:42:57.637583 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0505 07:42:57.637638 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0505 07:42:57.637708 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0505 07:42:57.637716 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0505 07:42:57.643296 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0505 07:42:57.643326 1 crd_finalizer.go:266] Starting CRDFinalizer I0505 07:42:57.694465 1 shared_informer.go:318] Caches are synced for node_authorizer I0505 07:42:57.736082 1 shared_informer.go:318] Caches are synced for configmaps I0505 07:42:57.736324 1 apf_controller.go:379] Running API Priority and Fairness config worker I0505 07:42:57.736344 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0505 07:42:57.736688 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0505 07:42:57.736896 1 cache.go:39] Caches are synced for AvailableConditionController controller I0505 07:42:57.736926 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0505 07:42:57.737908 1 shared_informer.go:318] Caches are synced for crd-autoregister I0505 07:42:57.737956 1 aggregator.go:166] initial CRD sync complete... I0505 07:42:57.738021 1 autoregister_controller.go:141] Starting autoregister controller I0505 07:42:57.738032 1 cache.go:32] Waiting for caches to sync for autoregister controller I0505 07:42:57.738089 1 cache.go:39] Caches are synced for autoregister controller I0505 07:42:57.738883 1 controller.go:624] quota admission added evaluator for: namespaces I0505 07:42:57.762068 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0505 07:42:58.647005 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0505 07:42:58.652010 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0505 07:42:58.652032 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0505 07:42:59.146453 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0505 07:42:59.193766 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0505 07:42:59.249019 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0505 07:42:59.256650 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.250] I0505 07:42:59.257677 1 controller.go:624] quota admission added evaluator for: endpoints I0505 07:42:59.265537 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0505 07:43:00.203803 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0505 07:43:01.011082 1 controller.go:624] quota admission added evaluator for: deployments.apps I0505 07:43:01.025887 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0505 07:43:01.199291 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0505 07:43:04.644613 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0505 07:43:05.394753 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0505 07:43:18.698157 1 trace.go:236] Trace[706815872]: "Get" accept:application/vnd.kubernetes.protobuf, */*,audit-id:745f3a27-1d26-4fc3-b978-29e25ccfa2e4,client:199.204.45.250,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-scheduler,user-agent:kube-scheduler/v1.28.13 (linux/amd64) kubernetes/024ab2a/leader-election,verb:GET (05-May-2026 07:43:18.193) (total time: 504ms): Trace[706815872]: ---"About to write a response" 504ms (07:43:18.697) Trace[706815872]: [504.295669ms] [504.295669ms] END I0505 07:43:22.182019 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0505 07:43:22.192940 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0505 07:43:22.231770 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0505 07:43:22.231814 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0505 07:43:22.270104 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0505 07:43:22.294641 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0505 07:43:22.350669 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0505 07:43:22.418214 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0505 07:43:22.437022 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0505 07:43:22.437060 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0505 07:43:22.510600 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0505 07:43:22.510650 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0505 07:43:22.544777 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0505 07:43:22.544857 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0505 07:43:22.582225 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0505 07:43:22.755423 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0505 07:43:22.755479 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0505 07:43:22.755494 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:22.801553 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:22.831080 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:22.861775 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:22.875051 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:23.489846 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:23.493977 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:23.562120 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0505 07:43:29.090687 1 trace.go:236] Trace[1931531428]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:2f94a4bc-77d5-4e1c-b450-0af291da30ea,client:199.204.45.250,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-cfz5m/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (05-May-2026 07:43:28.418) (total time: 671ms): Trace[1931531428]: ["GuaranteedUpdate etcd3" audit-id:2f94a4bc-77d5-4e1c-b450-0af291da30ea,key:/pods/kube-system/cilium-cfz5m,type:*core.Pod,resource:pods 671ms (07:43:28.419) Trace[1931531428]: ---"Txn call completed" 659ms (07:43:29.090)] Trace[1931531428]: ---"Object stored in database" 661ms (07:43:29.090) Trace[1931531428]: [671.75058ms] [671.75058ms] END I0505 07:43:29.090989 1 trace.go:236] Trace[2020119692]: "Delete" accept:application/json,audit-id:5f0cb481-e05e-4700-bf15-3c94155adf04,client:199.204.45.250,protocol:HTTP/2.0,resource:jobs,scope:resource,url:/apis/batch/v1/namespaces/envoy-gateway-system/jobs/envoy-gateway-gateway-helm-certgen,user-agent:Helm/3.11.2,verb:DELETE (05-May-2026 07:43:28.432) (total time: 658ms): Trace[2020119692]: [658.810223ms] [658.810223ms] END I0505 07:43:29.542132 1 controller.go:624] quota admission added evaluator for: jobs.batch I0505 07:43:30.304911 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0505 07:43:30.314247 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0505 07:43:30.534241 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0505 07:43:30.927835 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0505 07:43:31.096021 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0505 07:43:31.301594 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0505 07:43:31.494567 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0505 07:43:31.704971 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0505 07:43:32.323638 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0505 07:43:33.916871 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0505 07:43:34.331565 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0505 07:43:35.000494 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0505 07:43:35.000538 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0505 07:43:39.078430 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0505 07:43:47.352094 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.109.244.240"} W0505 07:43:48.827711 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.109.244.240:9443: connect: connection refused E0505 07:43:48.827770 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.109.244.240:9443: connect: connection refused