Name: cilium-operator-869df985b8-99727 Namespace: kube-system Priority: 2000000000 Priority Class Name: system-cluster-critical Service Account: cilium-operator Node: instance/199.204.45.109 Start Time: Thu, 14 May 2026 05:21:30 +0000 Labels: app.kubernetes.io/name=cilium-operator app.kubernetes.io/part-of=cilium io.cilium/app=operator name=cilium-operator pod-template-hash=869df985b8 Annotations: Status: Running IP: 199.204.45.109 IPs: IP: 199.204.45.109 Controlled By: ReplicaSet/cilium-operator-869df985b8 Containers: cilium-operator: Container ID: containerd://78554926fd983f27f4da0ea0a804855914e01bad52d237f20dfb433d7c1d4034 Image: harbor.atmosphere.dev/quay.io/cilium/operator-generic:v1.14.8 Image ID: harbor.atmosphere.dev/quay.io/cilium/operator-generic@sha256:56d373c12483c09964a00a29246595917603a077a298aa90a98e4de32c86b7dc Port: Host Port: Command: cilium-operator-generic Args: --config-dir=/tmp/cilium/config-map --debug=$(CILIUM_DEBUG) State: Running Started: Thu, 14 May 2026 06:23:56 +0000 Last State: Terminated Reason: Error Message: cedefinitions/ciliumloadbalancerippools.cilium.io\": dial tcp 10.96.0.1:443: connect: connection refused" function="apis.createCRDs.func1 (cell.go:64)" subsys=hive level=error msg="Failed to start when elected leader, shutting down" error="unable to create CRDs: Unable to create custom resource definition: Get \"https://10.96.0.1:443/apis/apiextensions.k8s.io/v1/customresourcedefinitions/ciliumloadbalancerippools.cilium.io\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=cilium-operator-generic level=info msg=Stopping subsys=hive level=info msg="Stop hook executed" duration="357.171µs" function="*api.server.Stop" subsys=hive level=info msg="failed to renew lease kube-system/cilium-operator-resource-lock: timed out waiting for the condition" subsys=klog Failed to release lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s": dial tcp 10.96.0.1:443: connect: connection refused level=error msg="Failed to release lock: Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=klog level=info msg="Leader election lost" operator-id=instance-ChYRuRozrK subsys=cilium-operator-generic level=info msg="Stop hook executed" duration=1.175027ms function="cmd.registerOperatorHooks.func2 (root.go:166)" subsys=hive level=info msg="Stop hook executed" duration="30.021µs" function="client.(*compositeClientset).onStop" subsys=hive level=info msg="Stopped gops server" address="127.0.0.1:9891" subsys=gops level=info msg="Stop hook executed" duration="186.256µs" function="gops.registerGopsHooks.func2 (cell.go:50)" subsys=hive level=fatal msg="unable to create CRDs: Unable to create custom resource definition: Get \"https://10.96.0.1:443/apis/apiextensions.k8s.io/v1/customresourcedefinitions/ciliumloadbalancerippools.cilium.io\": dial tcp 10.96.0.1:443: connect: connection refused" subsys=cilium-operator-generic Exit Code: 1 Started: Thu, 14 May 2026 06:21:19 +0000 Finished: Thu, 14 May 2026 06:21:38 +0000 Ready: True Restart Count: 3 Liveness: http-get http://127.0.0.1:9234/healthz delay=60s timeout=3s period=10s #success=1 #failure=3 Readiness: http-get http://127.0.0.1:9234/healthz delay=0s timeout=3s period=5s #success=1 #failure=5 Environment: K8S_NODE_NAME: (v1:spec.nodeName) CILIUM_K8S_NAMESPACE: kube-system (v1:metadata.namespace) CILIUM_DEBUG: Optional: true Mounts: /tmp/cilium/config-map from cilium-config-path (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-qj8sg (ro) Conditions: Type Status Initialized True Ready True ContainersReady True PodScheduled True Volumes: cilium-config-path: Type: ConfigMap (a volume populated by a ConfigMap) Name: cilium-config Optional: false kube-api-access-qj8sg: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: DownwardAPI: true QoS Class: BestEffort Node-Selectors: kubernetes.io/os=linux node-role.kubernetes.io/control-plane= Tolerations: op=Exists Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Pulled 35m (x2 over 75m) kubelet Container image "harbor.atmosphere.dev/quay.io/cilium/operator-generic:v1.14.8" already present on machine Warning Unhealthy 35m (x3 over 35m) kubelet Liveness probe failed: Get "http://127.0.0.1:9234/healthz": dial tcp 127.0.0.1:9234: connect: connection refused Normal Killing 35m kubelet Container cilium-operator failed liveness probe, will be restarted Normal Created 34m (x3 over 93m) kubelet Created container cilium-operator Warning Unhealthy 34m (x18 over 35m) kubelet Readiness probe failed: Get "http://127.0.0.1:9234/healthz": dial tcp 127.0.0.1:9234: connect: connection refused Normal Started 34m (x3 over 93m) kubelet Started container cilium-operator