I0417 18:43:48.266323       1 options.go:220] external host was not specified, using 199.19.213.60
I0417 18:43:48.267619       1 server.go:148] Version: v1.28.13
I0417 18:43:48.267668       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0417 18:43:48.741507       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0417 18:43:48.751461       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0417 18:43:48.751481       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0417 18:43:48.751683       1 instance.go:298] Using reconciler: lease
I0417 18:43:48.806555       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0417 18:43:48.806579       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0417 18:43:49.063289       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0417 18:43:49.063464       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0417 18:43:49.491754       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0417 18:43:49.504265       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0417 18:43:49.504294       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.504301       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.504836       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0417 18:43:49.504854       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0417 18:43:49.505572       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0417 18:43:49.506166       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0417 18:43:49.506179       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0417 18:43:49.506182       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0417 18:43:49.507389       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0417 18:43:49.507403       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0417 18:43:49.508001       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0417 18:43:49.508014       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.508017       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.508404       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0417 18:43:49.508415       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.508438       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0417 18:43:49.508787       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0417 18:43:49.509905       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0417 18:43:49.509918       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.509922       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.510428       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0417 18:43:49.510441       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.510444       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.510954       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0417 18:43:49.510966       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0417 18:43:49.516326       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0417 18:43:49.516352       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.516385       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.517717       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0417 18:43:49.517761       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.517771       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.522644       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0417 18:43:49.522663       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.522668       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.523548       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0417 18:43:49.524371       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0417 18:43:49.524384       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.524388       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.527206       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0417 18:43:49.527221       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0417 18:43:49.527225       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0417 18:43:49.527969       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0417 18:43:49.527984       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0417 18:43:49.527988       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0417 18:43:49.528390       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0417 18:43:49.528402       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0417 18:43:49.555578       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0417 18:43:49.555603       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0417 18:43:49.948919       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0417 18:43:49.948949       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0417 18:43:49.949227       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0417 18:43:49.949454       1 secure_serving.go:213] Serving securely on [::]:6443
I0417 18:43:49.949517       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0417 18:43:49.949865       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0417 18:43:49.949895       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0417 18:43:49.949902       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0417 18:43:49.949966       1 aggregator.go:164] waiting for initial CRD sync...
I0417 18:43:49.949987       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0417 18:43:49.950009       1 controller.go:78] Starting OpenAPI AggregationController
I0417 18:43:49.950102       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0417 18:43:49.950124       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0417 18:43:49.950133       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0417 18:43:49.950200       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0417 18:43:49.950211       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0417 18:43:49.950253       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0417 18:43:49.950441       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0417 18:43:49.950532       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0417 18:43:49.950200       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0417 18:43:49.950735       1 available_controller.go:423] Starting AvailableConditionController
I0417 18:43:49.950846       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0417 18:43:49.950937       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0417 18:43:49.950960       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0417 18:43:49.950971       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0417 18:43:49.951020       1 controller.go:134] Starting OpenAPI controller
I0417 18:43:49.951063       1 controller.go:85] Starting OpenAPI V3 controller
I0417 18:43:49.951089       1 controller.go:116] Starting legacy_token_tracking_controller
I0417 18:43:49.951098       1 naming_controller.go:291] Starting NamingConditionController
I0417 18:43:49.951105       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0417 18:43:49.951129       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0417 18:43:49.951154       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0417 18:43:49.951183       1 crd_finalizer.go:266] Starting CRDFinalizer
I0417 18:43:49.951116       1 establishing_controller.go:76] Starting EstablishingController
I0417 18:43:50.041818       1 shared_informer.go:318] Caches are synced for node_authorizer
I0417 18:43:50.050524       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0417 18:43:50.050586       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0417 18:43:50.051027       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0417 18:43:50.051186       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0417 18:43:50.051330       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0417 18:43:50.051192       1 shared_informer.go:318] Caches are synced for configmaps
I0417 18:43:50.051306       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0417 18:43:50.051503       1 aggregator.go:166] initial CRD sync complete...
I0417 18:43:50.051519       1 autoregister_controller.go:141] Starting autoregister controller
I0417 18:43:50.051529       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0417 18:43:50.051538       1 cache.go:39] Caches are synced for autoregister controller
I0417 18:43:50.052527       1 controller.go:624] quota admission added evaluator for: namespaces
I0417 18:43:50.064808       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0417 18:43:50.958336       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0417 18:43:50.963801       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0417 18:43:50.963823       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0417 18:43:51.517525       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0417 18:43:51.560634       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0417 18:43:51.674387       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0417 18:43:51.681489       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.60]
I0417 18:43:51.682382       1 controller.go:624] quota admission added evaluator for: endpoints
I0417 18:43:51.690792       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0417 18:43:52.275305       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0417 18:43:53.444520       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0417 18:43:53.535959       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0417 18:43:53.743717       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0417 18:43:57.424350       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0417 18:43:57.520703       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0417 18:44:17.261892       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0417 18:44:17.307993       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0417 18:44:17.328254       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0417 18:44:17.354142       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0417 18:44:17.373952       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0417 18:44:17.373990       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0417 18:44:17.402347       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0417 18:44:17.433057       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0417 18:44:17.433112       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0417 18:44:17.472899       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0417 18:44:17.472946       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0417 18:44:17.515303       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0417 18:44:17.550597       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0417 18:44:17.550719       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0417 18:44:17.698549       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0417 18:44:17.698682       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0417 18:44:17.721850       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0417 18:44:17.742837       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:17.793179       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:17.821930       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:17.852603       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:17.886338       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:18.442908       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:18.443045       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:18.507861       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0417 18:44:24.194967       1 trace.go:236] Trace[936940655]: "Create" accept:application/json,audit-id:6832d516-229c-4535-8fa3-1bc75e26128a,client:199.19.213.60,protocol:HTTP/2.0,resource:mutatingwebhookconfigurations,scope:resource,url:/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations,user-agent:Helm/3.11.2,verb:POST (17-Apr-2026 18:44:23.593) (total time: 601ms):
Trace[936940655]: ["Create etcd3" audit-id:6832d516-229c-4535-8fa3-1bc75e26128a,key:/mutatingwebhookconfigurations/envoy-gateway-topology-injector.envoy-gateway-system,type:*admissionregistration.MutatingWebhookConfiguration,resource:mutatingwebhookconfigurations.admissionregistration.k8s.io 599ms (18:44:23.594)
Trace[936940655]:  ---"Txn call succeeded" 599ms (18:44:24.194)]
Trace[936940655]: [601.40229ms] [601.40229ms] END
I0417 18:44:24.196356       1 trace.go:236] Trace[1137646437]: "Get" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:81677115-37bc-4c38-bb3a-e7fbd7061a66,client:199.19.213.60,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-2r4j8,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (17-Apr-2026 18:44:23.616) (total time: 579ms):
Trace[1137646437]: ---"About to write a response" 578ms (18:44:24.195)
Trace[1137646437]: [579.488512ms] [579.488512ms] END
I0417 18:44:24.669053       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0417 18:44:25.422602       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0417 18:44:25.433093       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0417 18:44:25.621179       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0417 18:44:25.867910       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0417 18:44:26.020563       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0417 18:44:26.242846       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0417 18:44:26.430345       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0417 18:44:26.820155       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0417 18:44:28.478823       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0417 18:44:29.245104       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0417 18:44:29.424886       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0417 18:44:41.662955       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0417 18:44:41.662995       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0417 18:44:42.136229       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0417 18:44:49.824501       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.97.230.18"}
W0417 18:44:49.854819       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.97.230.18:9443: connect: connection refused
E0417 18:44:49.854902       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.97.230.18:9443: connect: connection refused
I0417 18:45:56.865831       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-provisioner-http-metrics" clusterIPs={"IPv4":"10.111.208.175"}
I0417 18:45:56.876912       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-nodeplugin-http-metrics" clusterIPs={"IPv4":"10.97.111.134"}