I0509 01:35:33.732714 1 options.go:220] external host was not specified, using 199.204.45.113 I0509 01:35:33.733621 1 server.go:148] Version: v1.28.13 I0509 01:35:33.733670 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0509 01:35:34.116921 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer W0509 01:35:34.117720 1 logging.go:59] [core] [Channel #1 SubChannel #2] grpc: addrConn.createTransport failed to connect to {Addr: "127.0.0.1:2379", ServerName: "127.0.0.1", }. Err: connection error: desc = "transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused" W0509 01:35:34.118748 1 logging.go:59] [core] [Channel #3 SubChannel #4] grpc: addrConn.createTransport failed to connect to {Addr: "127.0.0.1:2379", ServerName: "127.0.0.1", }. Err: connection error: desc = "transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused" I0509 01:35:34.126208 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0509 01:35:34.126228 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0509 01:35:34.126498 1 instance.go:298] Using reconciler: lease W0509 01:35:34.129840 1 logging.go:59] [core] [Channel #5 SubChannel #6] grpc: addrConn.createTransport failed to connect to {Addr: "127.0.0.1:2379", ServerName: "127.0.0.1", }. Err: connection error: desc = "transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused" I0509 01:35:35.173546 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0509 01:35:35.173579 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0509 01:35:35.431291 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0509 01:35:35.431831 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0509 01:35:35.923315 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0509 01:35:35.944306 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0509 01:35:35.944334 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.944340 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.944874 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0509 01:35:35.944888 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0509 01:35:35.945736 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0509 01:35:35.946436 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0509 01:35:35.946450 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0509 01:35:35.946454 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0509 01:35:35.947754 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0509 01:35:35.947769 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0509 01:35:35.948813 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0509 01:35:35.948827 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.948831 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.949387 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0509 01:35:35.949402 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.949494 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0509 01:35:35.950006 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0509 01:35:35.951319 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0509 01:35:35.951334 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.951338 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.951773 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0509 01:35:35.951790 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.951795 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.952476 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0509 01:35:35.952490 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0509 01:35:35.954123 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0509 01:35:35.954139 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.954144 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.954618 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0509 01:35:35.954637 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.954641 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.956605 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0509 01:35:35.956620 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.956624 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.957680 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0509 01:35:35.959538 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0509 01:35:35.959554 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.959558 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.962607 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0509 01:35:35.962623 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0509 01:35:35.962627 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0509 01:35:35.963461 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0509 01:35:35.963477 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0509 01:35:35.963481 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0509 01:35:35.963975 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0509 01:35:35.963990 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0509 01:35:36.010932 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0509 01:35:36.010973 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0509 01:35:36.478005 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0509 01:35:36.478032 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0509 01:35:36.478283 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0509 01:35:36.478413 1 secure_serving.go:213] Serving securely on [::]:6443 I0509 01:35:36.478519 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0509 01:35:36.478605 1 system_namespaces_controller.go:67] Starting system namespaces controller I0509 01:35:36.478887 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0509 01:35:36.478933 1 gc_controller.go:78] Starting apiserver lease garbage collector I0509 01:35:36.479067 1 controller.go:78] Starting OpenAPI AggregationController I0509 01:35:36.479564 1 available_controller.go:423] Starting AvailableConditionController I0509 01:35:36.479653 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0509 01:35:36.480038 1 gc_controller.go:78] Starting apiserver lease garbage collector I0509 01:35:36.480268 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0509 01:35:36.480287 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0509 01:35:36.480829 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0509 01:35:36.480897 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0509 01:35:36.481087 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0509 01:35:36.481107 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0509 01:35:36.481139 1 controller.go:80] Starting OpenAPI V3 AggregationController I0509 01:35:36.483861 1 controller.go:116] Starting legacy_token_tracking_controller I0509 01:35:36.483885 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0509 01:35:36.483917 1 aggregator.go:164] waiting for initial CRD sync... I0509 01:35:36.484082 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0509 01:35:36.484373 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0509 01:35:36.484391 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0509 01:35:36.484440 1 controller.go:134] Starting OpenAPI controller I0509 01:35:36.484476 1 controller.go:85] Starting OpenAPI V3 controller I0509 01:35:36.484514 1 naming_controller.go:291] Starting NamingConditionController I0509 01:35:36.484594 1 establishing_controller.go:76] Starting EstablishingController I0509 01:35:36.484620 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0509 01:35:36.484828 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0509 01:35:36.484992 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0509 01:35:36.485229 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0509 01:35:36.485270 1 crd_finalizer.go:266] Starting CRDFinalizer I0509 01:35:36.517598 1 shared_informer.go:318] Caches are synced for node_authorizer I0509 01:35:36.579674 1 apf_controller.go:379] Running API Priority and Fairness config worker I0509 01:35:36.579763 1 cache.go:39] Caches are synced for AvailableConditionController controller I0509 01:35:36.579782 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0509 01:35:36.581499 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0509 01:35:36.581536 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0509 01:35:36.581731 1 controller.go:624] quota admission added evaluator for: namespaces I0509 01:35:36.584002 1 shared_informer.go:318] Caches are synced for configmaps I0509 01:35:36.584436 1 shared_informer.go:318] Caches are synced for crd-autoregister I0509 01:35:36.584480 1 aggregator.go:166] initial CRD sync complete... I0509 01:35:36.584490 1 autoregister_controller.go:141] Starting autoregister controller I0509 01:35:36.584499 1 cache.go:32] Waiting for caches to sync for autoregister controller I0509 01:35:36.584509 1 cache.go:39] Caches are synced for autoregister controller I0509 01:35:36.603029 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0509 01:35:37.489756 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0509 01:35:37.495854 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0509 01:35:37.495871 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0509 01:35:38.093493 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0509 01:35:38.142790 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0509 01:35:38.196335 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0509 01:35:38.204183 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.113] I0509 01:35:38.205539 1 controller.go:624] quota admission added evaluator for: endpoints I0509 01:35:38.211176 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0509 01:35:39.012906 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0509 01:35:40.175059 1 controller.go:624] quota admission added evaluator for: deployments.apps I0509 01:35:40.217243 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0509 01:35:40.421604 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0509 01:35:44.010803 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0509 01:35:44.057611 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0509 01:36:05.596033 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0509 01:36:05.620442 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0509 01:36:05.630088 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0509 01:36:05.630133 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0509 01:36:05.686949 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0509 01:36:05.709562 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0509 01:36:05.731808 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0509 01:36:05.762041 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0509 01:36:05.762115 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0509 01:36:05.777701 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0509 01:36:05.777745 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0509 01:36:05.803362 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0509 01:36:05.803418 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0509 01:36:05.850506 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0509 01:36:05.889186 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0509 01:36:06.028091 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0509 01:36:06.028814 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0509 01:36:06.057307 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:06.108267 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:06.135210 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:06.235840 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:06.240839 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:07.020046 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:07.079085 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:07.149401 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0509 01:36:12.461364 1 trace.go:236] Trace[1481697557]: "Update" accept:application/json, */*,audit-id:442bfec9-62c5-443f-ab33-6af5a473ed9f,client:199.204.45.113,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (09-May-2026 01:36:11.866) (total time: 594ms): Trace[1481697557]: ---"Conversion done" 20ms (01:36:11.892) Trace[1481697557]: ["GuaranteedUpdate etcd3" audit-id:442bfec9-62c5-443f-ab33-6af5a473ed9f,key:/secrets/envoy-gateway-system/sh.helm.release.v1.envoy-gateway.v1,type:*core.Secret,resource:secrets 567ms (01:36:11.893) Trace[1481697557]: ---"Txn call completed" 531ms (01:36:12.431)] Trace[1481697557]: ---"Writing http response done" 29ms (01:36:12.461) Trace[1481697557]: [594.360152ms] [594.360152ms] END I0509 01:36:12.985945 1 controller.go:624] quota admission added evaluator for: jobs.batch I0509 01:36:14.602769 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0509 01:36:14.608296 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0509 01:36:14.616911 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0509 01:36:14.629163 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0509 01:36:14.648597 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0509 01:36:14.782811 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0509 01:36:15.373122 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0509 01:36:15.570030 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0509 01:36:16.602095 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0509 01:36:17.170815 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0509 01:36:17.378324 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0509 01:36:22.487330 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0509 01:36:22.487377 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0509 01:36:22.909347 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0509 01:36:30.596929 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.108.168.96"} W0509 01:36:30.633209 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.108.168.96:9443: connect: connection refused E0509 01:36:30.633252 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.108.168.96:9443: connect: connection refused I0509 01:37:38.558414 1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-provisioner-http-metrics" clusterIPs={"IPv4":"10.109.207.104"} I0509 01:37:38.570547 1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-nodeplugin-http-metrics" clusterIPs={"IPv4":"10.109.98.159"}