I0207 03:54:42.444129 1 options.go:220] external host was not specified, using 199.204.45.169 I0207 03:54:42.446059 1 server.go:148] Version: v1.28.13 I0207 03:54:42.446159 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0207 03:54:43.155918 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0207 03:54:43.176080 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0207 03:54:43.176097 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0207 03:54:43.176696 1 instance.go:298] Using reconciler: lease I0207 03:54:43.457933 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0207 03:54:43.457954 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0207 03:54:43.763332 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0207 03:54:43.763764 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0207 03:54:44.103099 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0207 03:54:44.134527 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0207 03:54:44.134703 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.134770 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.135730 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0207 03:54:44.135751 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0207 03:54:44.136542 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0207 03:54:44.137148 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0207 03:54:44.137161 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0207 03:54:44.137164 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0207 03:54:44.138181 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0207 03:54:44.138195 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0207 03:54:44.138754 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0207 03:54:44.138765 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.138769 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.139204 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0207 03:54:44.139217 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.139243 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0207 03:54:44.139617 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0207 03:54:44.140866 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0207 03:54:44.140879 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.140883 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.141246 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0207 03:54:44.141258 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.141262 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.141793 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0207 03:54:44.141806 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0207 03:54:44.143081 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0207 03:54:44.143094 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.143098 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.143468 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0207 03:54:44.143482 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.143485 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.145085 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0207 03:54:44.145101 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.145105 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.145968 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0207 03:54:44.146828 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0207 03:54:44.146842 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.146846 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.149938 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0207 03:54:44.149953 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0207 03:54:44.149956 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0207 03:54:44.150595 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0207 03:54:44.150609 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0207 03:54:44.150613 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0207 03:54:44.151045 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0207 03:54:44.151059 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0207 03:54:44.183092 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0207 03:54:44.183109 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0207 03:54:44.734315 1 secure_serving.go:213] Serving securely on [::]:6443 I0207 03:54:44.734600 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0207 03:54:44.734831 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0207 03:54:44.734970 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0207 03:54:44.737334 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0207 03:54:44.737402 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0207 03:54:44.737486 1 controller.go:78] Starting OpenAPI AggregationController I0207 03:54:44.737844 1 gc_controller.go:78] Starting apiserver lease garbage collector I0207 03:54:44.739030 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0207 03:54:44.739049 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0207 03:54:44.740513 1 controller.go:116] Starting legacy_token_tracking_controller I0207 03:54:44.740581 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0207 03:54:44.740683 1 available_controller.go:423] Starting AvailableConditionController I0207 03:54:44.740746 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0207 03:54:44.740816 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0207 03:54:44.742465 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0207 03:54:44.742897 1 gc_controller.go:78] Starting apiserver lease garbage collector I0207 03:54:44.743049 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0207 03:54:44.743082 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0207 03:54:44.743192 1 controller.go:80] Starting OpenAPI V3 AggregationController I0207 03:54:44.743230 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0207 03:54:44.743270 1 system_namespaces_controller.go:67] Starting system namespaces controller I0207 03:54:44.743295 1 aggregator.go:164] waiting for initial CRD sync... I0207 03:54:44.743335 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0207 03:54:44.743404 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0207 03:54:44.750897 1 controller.go:134] Starting OpenAPI controller I0207 03:54:44.750924 1 controller.go:85] Starting OpenAPI V3 controller I0207 03:54:44.750944 1 naming_controller.go:291] Starting NamingConditionController I0207 03:54:44.750959 1 establishing_controller.go:76] Starting EstablishingController I0207 03:54:44.750972 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0207 03:54:44.750986 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0207 03:54:44.751000 1 crd_finalizer.go:266] Starting CRDFinalizer I0207 03:54:44.751586 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0207 03:54:44.751598 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0207 03:54:44.851855 1 shared_informer.go:318] Caches are synced for crd-autoregister I0207 03:54:44.851935 1 aggregator.go:166] initial CRD sync complete... I0207 03:54:44.851947 1 autoregister_controller.go:141] Starting autoregister controller I0207 03:54:44.851953 1 cache.go:32] Waiting for caches to sync for autoregister controller I0207 03:54:44.851961 1 cache.go:39] Caches are synced for autoregister controller I0207 03:54:44.856119 1 shared_informer.go:318] Caches are synced for node_authorizer E0207 03:54:44.929116 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0207 03:54:44.937980 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0207 03:54:44.943681 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0207 03:54:44.943742 1 cache.go:39] Caches are synced for AvailableConditionController controller I0207 03:54:44.943772 1 shared_informer.go:318] Caches are synced for configmaps I0207 03:54:44.946402 1 apf_controller.go:379] Running API Priority and Fairness config worker I0207 03:54:44.950811 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0207 03:54:44.947925 1 controller.go:624] quota admission added evaluator for: namespaces I0207 03:54:45.132691 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0207 03:54:45.840051 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0207 03:54:45.847811 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0207 03:54:45.847832 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0207 03:54:46.417305 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0207 03:54:46.486932 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0207 03:54:46.559177 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0207 03:54:46.564238 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.169] I0207 03:54:46.564857 1 controller.go:624] quota admission added evaluator for: endpoints I0207 03:54:46.570784 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0207 03:54:47.390168 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0207 03:54:48.136472 1 controller.go:624] quota admission added evaluator for: deployments.apps I0207 03:54:48.234928 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0207 03:54:48.415496 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0207 03:54:51.734216 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0207 03:54:52.582635 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0207 03:55:12.614050 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0207 03:55:12.818445 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0207 03:55:12.994659 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0207 03:55:13.224471 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0207 03:55:13.412302 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0207 03:55:13.610235 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0207 03:55:13.897566 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0207 03:55:14.086609 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0207 03:55:14.647071 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0207 03:55:17.428356 1 trace.go:236] Trace[2058863042]: "GuaranteedUpdate etcd3" audit-id:,key:/masterleases/199.204.45.169,type:*v1.Endpoints,resource:apiServerIPInfo (07-Feb-2026 03:55:16.600) (total time: 828ms): Trace[2058863042]: ---"Transaction prepared" 74ms (03:55:16.726) Trace[2058863042]: ---"Txn call completed" 702ms (03:55:17.428) Trace[2058863042]: [828.199786ms] [828.199786ms] END I0207 03:55:17.428488 1 trace.go:236] Trace[2073459254]: "Get" accept:application/json, */*,audit-id:48dd715e-ff80-4dab-8134-9c4cd90d385b,client:127.0.0.1,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/plndr-cp-lock,user-agent:kube-vip/v0.0.0 (linux/amd64) kubernetes/$Format,verb:GET (07-Feb-2026 03:55:16.723) (total time: 704ms): Trace[2073459254]: ---"About to write a response" 704ms (03:55:17.428) Trace[2073459254]: [704.76346ms] [704.76346ms] END I0207 03:55:18.112484 1 trace.go:236] Trace[1214318168]: "Get" accept:application/json, */*,audit-id:c756186d-8321-4c62-989e-45683a3ed92c,client:199.204.45.169,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock,user-agent:cilium-operator-generic/v0.0.0 (linux/amd64) kubernetes/$Format/leader-election,verb:GET (07-Feb-2026 03:55:16.728) (total time: 1384ms): Trace[1214318168]: ---"About to write a response" 1384ms (03:55:18.112) Trace[1214318168]: [1.384402226s] [1.384402226s] END I0207 03:55:18.114322 1 trace.go:236] Trace[1724752177]: "Update" accept:application/json, */*,audit-id:63942068-fa40-4076-a823-cbc25368fdf5,client:127.0.0.1,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/plndr-cp-lock,user-agent:kube-vip/v0.0.0 (linux/amd64) kubernetes/$Format,verb:PUT (07-Feb-2026 03:55:17.431) (total time: 683ms): Trace[1724752177]: ["GuaranteedUpdate etcd3" audit-id:63942068-fa40-4076-a823-cbc25368fdf5,key:/leases/kube-system/plndr-cp-lock,type:*coordination.Lease,resource:leases.coordination.k8s.io 682ms (03:55:17.431) Trace[1724752177]: ---"Txn call completed" 682ms (03:55:18.114)] Trace[1724752177]: [683.164277ms] [683.164277ms] END I0207 03:55:18.117964 1 trace.go:236] Trace[595734825]: "Get" accept:application/vnd.kubernetes.protobuf, */*,audit-id:e5cc9c29-47a0-4e00-9545-574f4e018dbf,client:::1,protocol:HTTP/2.0,resource:endpoints,scope:resource,url:/api/v1/namespaces/default/endpoints/kubernetes,user-agent:kube-apiserver/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (07-Feb-2026 03:55:17.429) (total time: 688ms): Trace[595734825]: ---"About to write a response" 688ms (03:55:18.117) Trace[595734825]: [688.860838ms] [688.860838ms] END I0207 03:55:18.162266 1 trace.go:236] Trace[502829905]: "Update" accept:application/vnd.kubernetes.protobuf, */*,audit-id:1fd3ffe6-ed43-42ea-baff-c6968b705dab,client:::1,protocol:HTTP/2.0,resource:customresourcedefinitions,scope:resource,url:/apis/apiextensions.k8s.io/v1/customresourcedefinitions/ciliumnetworkpolicies.cilium.io/status,user-agent:kube-apiserver/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PUT (07-Feb-2026 03:55:16.524) (total time: 1637ms): Trace[502829905]: ["GuaranteedUpdate etcd3" audit-id:1fd3ffe6-ed43-42ea-baff-c6968b705dab,key:/apiextensions.k8s.io/customresourcedefinitions/ciliumnetworkpolicies.cilium.io,type:*apiextensions.CustomResourceDefinition,resource:customresourcedefinitions.apiextensions.k8s.io 1605ms (03:55:16.556) Trace[502829905]: ---"initial value restored" 74ms (03:55:16.631) Trace[502829905]: ---"About to Encode" 165ms (03:55:16.796) Trace[502829905]: ---"Txn call completed" 1328ms (03:55:18.129)] Trace[502829905]: [1.637299726s] [1.637299726s] END I0207 03:55:18.163201 1 trace.go:236] Trace[771935360]: "Get" accept:application/vnd.kubernetes.protobuf, */*,audit-id:9941c8e4-d35e-4b52-8ad4-a1f8ce72e094,client:199.204.45.169,protocol:HTTP/2.0,resource:customresourcedefinitions,scope:resource,url:/apis/apiextensions.k8s.io/v1/customresourcedefinitions/ciliumnodes.cilium.io,user-agent:cilium-operator-generic/1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64,verb:GET (07-Feb-2026 03:55:16.788) (total time: 1375ms): Trace[771935360]: ---"About to write a response" 1340ms (03:55:18.128) Trace[771935360]: [1.375153641s] [1.375153641s] END I0207 03:55:18.165010 1 trace.go:236] Trace[1891887231]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:dc55c830-f6a9-4023-b8b9-6ef4b0caf03e,client:199.204.45.169,protocol:HTTP/2.0,resource:customresourcedefinitions,scope:resource,url:/apis/apiextensions.k8s.io/v1/customresourcedefinitions,user-agent:cilium-operator-generic/1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64,verb:POST (07-Feb-2026 03:55:16.608) (total time: 1556ms): Trace[1891887231]: ["Create etcd3" audit-id:dc55c830-f6a9-4023-b8b9-6ef4b0caf03e,key:/apiextensions.k8s.io/customresourcedefinitions/ciliumclusterwidenetworkpolicies.cilium.io,type:*apiextensions.CustomResourceDefinition,resource:customresourcedefinitions.apiextensions.k8s.io 1417ms (03:55:16.747) Trace[1891887231]: ---"Txn call succeeded" 1383ms (03:55:18.141)] Trace[1891887231]: [1.556136371s] [1.556136371s] END I0207 03:55:18.197059 1 trace.go:236] Trace[11322205]: "Get" accept:application/vnd.kubernetes.protobuf, */*,audit-id:88c51b15-ab5c-4660-adb5-21911843c1df,client:199.204.45.169,protocol:HTTP/2.0,resource:customresourcedefinitions,scope:resource,url:/apis/apiextensions.k8s.io/v1/customresourcedefinitions/ciliumnetworkpolicies.cilium.io,user-agent:cilium-operator-generic/1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64,verb:GET (07-Feb-2026 03:55:17.091) (total time: 1105ms): Trace[11322205]: ---"About to write a response" 1098ms (03:55:18.190) Trace[11322205]: [1.105208231s] [1.105208231s] END I0207 03:55:18.650292 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0207 03:55:18.845483 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0207 03:55:35.208455 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io