I0519 17:57:56.316941       1 options.go:220] external host was not specified, using 199.19.213.201
I0519 17:57:56.317677       1 server.go:148] Version: v1.28.13
I0519 17:57:56.317692       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0519 17:57:56.606759       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0519 17:57:56.618857       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0519 17:57:56.618889       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0519 17:57:56.619117       1 instance.go:298] Using reconciler: lease
I0519 17:57:56.664219       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0519 17:57:56.664395       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0519 17:57:56.909078       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0519 17:57:56.910292       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0519 17:57:57.352809       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0519 17:57:57.371355       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0519 17:57:57.371386       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.371392       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.371864       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0519 17:57:57.371880       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0519 17:57:57.372631       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0519 17:57:57.373233       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0519 17:57:57.373246       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0519 17:57:57.373250       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0519 17:57:57.374423       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0519 17:57:57.374435       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0519 17:57:57.375145       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0519 17:57:57.375156       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.375160       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.375595       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0519 17:57:57.375606       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.375636       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0519 17:57:57.376088       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0519 17:57:57.377289       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0519 17:57:57.377303       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.377307       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.377627       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0519 17:57:57.377637       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.377640       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.378198       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0519 17:57:57.378208       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0519 17:57:57.379458       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0519 17:57:57.379471       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.379474       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.380688       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0519 17:57:57.380701       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.380705       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.382634       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0519 17:57:57.382646       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.382649       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.383542       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0519 17:57:57.384544       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0519 17:57:57.384558       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.384562       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.387798       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0519 17:57:57.387811       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0519 17:57:57.387815       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0519 17:57:57.388515       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0519 17:57:57.388528       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0519 17:57:57.388531       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0519 17:57:57.388997       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0519 17:57:57.389009       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0519 17:57:57.435311       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0519 17:57:57.435342       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0519 17:57:57.806061       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0519 17:57:57.806155       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0519 17:57:57.806062       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0519 17:57:57.806590       1 secure_serving.go:213] Serving securely on [::]:6443
I0519 17:57:57.806737       1 controller.go:78] Starting OpenAPI AggregationController
I0519 17:57:57.806762       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0519 17:57:57.806813       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0519 17:57:57.806874       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0519 17:57:57.806892       1 available_controller.go:423] Starting AvailableConditionController
I0519 17:57:57.806896       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0519 17:57:57.807025       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0519 17:57:57.807077       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0519 17:57:57.807149       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0519 17:57:57.807183       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0519 17:57:57.806899       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0519 17:57:57.807358       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0519 17:57:57.807370       1 controller.go:116] Starting legacy_token_tracking_controller
I0519 17:57:57.807381       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0519 17:57:57.808557       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0519 17:57:57.809187       1 controller.go:134] Starting OpenAPI controller
I0519 17:57:57.809266       1 controller.go:85] Starting OpenAPI V3 controller
I0519 17:57:57.809307       1 naming_controller.go:291] Starting NamingConditionController
I0519 17:57:57.809359       1 establishing_controller.go:76] Starting EstablishingController
I0519 17:57:57.809395       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0519 17:57:57.809525       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0519 17:57:57.809584       1 crd_finalizer.go:266] Starting CRDFinalizer
I0519 17:57:57.811123       1 aggregator.go:164] waiting for initial CRD sync...
I0519 17:57:57.811158       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0519 17:57:57.811263       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0519 17:57:57.821745       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0519 17:57:57.843991       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0519 17:57:57.844008       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0519 17:57:57.844034       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0519 17:57:57.844149       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
E0519 17:57:57.882871       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0519 17:57:57.907052       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0519 17:57:57.907082       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0519 17:57:57.907274       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0519 17:57:57.907291       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0519 17:57:57.907341       1 shared_informer.go:318] Caches are synced for node_authorizer
I0519 17:57:57.907463       1 shared_informer.go:318] Caches are synced for configmaps
I0519 17:57:57.908782       1 controller.go:624] quota admission added evaluator for: namespaces
I0519 17:57:57.911702       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0519 17:57:57.911935       1 aggregator.go:166] initial CRD sync complete...
I0519 17:57:57.911950       1 autoregister_controller.go:141] Starting autoregister controller
I0519 17:57:57.911958       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0519 17:57:57.911964       1 cache.go:39] Caches are synced for autoregister controller
I0519 17:57:57.944046       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0519 17:57:58.087009       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0519 17:57:58.823886       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0519 17:57:58.829721       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0519 17:57:58.829744       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0519 17:57:59.356720       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0519 17:57:59.400634       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0519 17:57:59.521614       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0519 17:57:59.531540       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.201]
I0519 17:57:59.533298       1 controller.go:624] quota admission added evaluator for: endpoints
I0519 17:57:59.538394       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0519 17:58:00.979457       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0519 17:58:01.772250       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0519 17:58:01.909014       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0519 17:58:02.112096       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0519 17:58:06.022396       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0519 17:58:06.139312       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0519 17:58:26.315607       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0519 17:58:26.368954       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0519 17:58:26.414693       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0519 17:58:26.614265       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0519 17:58:26.645970       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0519 17:58:26.646073       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0519 17:58:26.677218       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0519 17:58:26.740175       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0519 17:58:26.740230       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0519 17:58:26.764613       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0519 17:58:26.764665       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0519 17:58:26.795668       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0519 17:58:26.795865       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0519 17:58:26.805641       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0519 17:58:26.852797       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0519 17:58:26.983440       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0519 17:58:26.983499       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0519 17:58:26.988634       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.038312       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.056669       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.096584       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.121444       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.807660       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.809066       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:27.897550       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0519 17:58:33.539431       1 trace.go:236] Trace[573158192]: "Update" accept:application/json, */*,audit-id:47af6b71-ecc4-49a9-88ee-b1c3c82e2ac7,client:199.19.213.201,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (19-May-2026 17:58:33.020) (total time: 518ms):
Trace[573158192]: ---"Conversion done" 19ms (17:58:33.046)
Trace[573158192]: ---"Writing http response done" 29ms (17:58:33.539)
Trace[573158192]: [518.969842ms] [518.969842ms] END
I0519 17:58:33.561572       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0519 17:58:35.395395       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0519 17:58:35.413692       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0519 17:58:35.429181       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0519 17:58:36.747949       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0519 17:58:36.757440       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0519 17:58:36.765353       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0519 17:58:36.775914       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0519 17:58:37.189408       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0519 17:58:37.390925       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0519 17:58:38.812129       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0519 17:58:39.182756       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0519 17:58:50.049681       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0519 17:58:50.049722       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0519 17:58:50.471881       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0519 17:58:57.182649       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.105.18.130"}
W0519 17:58:57.217029       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.105.18.130:9443: connect: connection refused
E0519 17:58:57.217055       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.105.18.130:9443: connect: connection refused