I0228 01:25:15.703897 1 options.go:220] external host was not specified, using 199.204.45.129 I0228 01:25:15.704755 1 server.go:148] Version: v1.28.13 I0228 01:25:15.704811 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0228 01:25:16.397877 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0228 01:25:16.415987 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0228 01:25:16.416010 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0228 01:25:16.416361 1 instance.go:298] Using reconciler: lease I0228 01:25:16.473865 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0228 01:25:16.473884 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0228 01:25:16.707110 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0228 01:25:16.707448 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0228 01:25:17.143450 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0228 01:25:17.155020 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0228 01:25:17.155052 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.155060 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.155506 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0228 01:25:17.155523 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0228 01:25:17.156131 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0228 01:25:17.156781 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0228 01:25:17.156795 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0228 01:25:17.156799 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0228 01:25:17.157868 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0228 01:25:17.157882 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0228 01:25:17.158825 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0228 01:25:17.158838 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.158842 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.159296 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0228 01:25:17.159309 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.159337 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0228 01:25:17.161230 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0228 01:25:17.165456 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0228 01:25:17.165472 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.165478 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.166451 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0228 01:25:17.166471 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.166476 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.168321 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0228 01:25:17.168334 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0228 01:25:17.171094 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0228 01:25:17.171109 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.171114 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.171533 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0228 01:25:17.171551 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.171554 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.173318 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0228 01:25:17.173331 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.173335 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.174527 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0228 01:25:17.175505 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0228 01:25:17.175518 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.175522 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.178830 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0228 01:25:17.178858 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0228 01:25:17.178862 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0228 01:25:17.179620 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0228 01:25:17.179635 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0228 01:25:17.179639 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0228 01:25:17.180078 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0228 01:25:17.180091 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0228 01:25:17.221554 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0228 01:25:17.221589 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0228 01:25:17.604450 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0228 01:25:17.604531 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0228 01:25:17.604813 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0228 01:25:17.604862 1 secure_serving.go:213] Serving securely on [::]:6443 I0228 01:25:17.604974 1 aggregator.go:164] waiting for initial CRD sync... I0228 01:25:17.604977 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0228 01:25:17.605091 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0228 01:25:17.605159 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0228 01:25:17.605173 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0228 01:25:17.605259 1 controller.go:80] Starting OpenAPI V3 AggregationController I0228 01:25:17.605293 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0228 01:25:17.605126 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0228 01:25:17.605364 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0228 01:25:17.605447 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0228 01:25:17.605704 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0228 01:25:17.605915 1 available_controller.go:423] Starting AvailableConditionController I0228 01:25:17.605940 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0228 01:25:17.605985 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0228 01:25:17.605713 1 controller.go:116] Starting legacy_token_tracking_controller I0228 01:25:17.606177 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0228 01:25:17.605724 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0228 01:25:17.606256 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0228 01:25:17.607253 1 controller.go:78] Starting OpenAPI AggregationController I0228 01:25:17.607575 1 gc_controller.go:78] Starting apiserver lease garbage collector I0228 01:25:17.607666 1 system_namespaces_controller.go:67] Starting system namespaces controller I0228 01:25:17.608257 1 gc_controller.go:78] Starting apiserver lease garbage collector I0228 01:25:17.611751 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0228 01:25:17.612981 1 controller.go:134] Starting OpenAPI controller I0228 01:25:17.613115 1 controller.go:85] Starting OpenAPI V3 controller I0228 01:25:17.613174 1 naming_controller.go:291] Starting NamingConditionController I0228 01:25:17.613202 1 establishing_controller.go:76] Starting EstablishingController I0228 01:25:17.613225 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0228 01:25:17.613295 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0228 01:25:17.613322 1 crd_finalizer.go:266] Starting CRDFinalizer E0228 01:25:17.685174 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0228 01:25:17.698920 1 shared_informer.go:318] Caches are synced for node_authorizer I0228 01:25:17.705461 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0228 01:25:17.705495 1 apf_controller.go:379] Running API Priority and Fairness config worker I0228 01:25:17.705500 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0228 01:25:17.705568 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0228 01:25:17.706061 1 cache.go:39] Caches are synced for AvailableConditionController controller I0228 01:25:17.706346 1 shared_informer.go:318] Caches are synced for crd-autoregister I0228 01:25:17.706430 1 aggregator.go:166] initial CRD sync complete... I0228 01:25:17.706510 1 autoregister_controller.go:141] Starting autoregister controller I0228 01:25:17.706544 1 cache.go:32] Waiting for caches to sync for autoregister controller I0228 01:25:17.706573 1 shared_informer.go:318] Caches are synced for configmaps I0228 01:25:17.706618 1 cache.go:39] Caches are synced for autoregister controller I0228 01:25:17.709224 1 controller.go:624] quota admission added evaluator for: namespaces I0228 01:25:17.888794 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0228 01:25:18.615427 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0228 01:25:18.622507 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0228 01:25:18.622532 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0228 01:25:20.755714 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0228 01:25:20.827457 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0228 01:25:20.927530 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0228 01:25:20.937684 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.129] I0228 01:25:20.938647 1 controller.go:624] quota admission added evaluator for: endpoints I0228 01:25:20.942988 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0228 01:25:21.495749 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0228 01:25:22.411576 1 controller.go:624] quota admission added evaluator for: deployments.apps I0228 01:25:22.521766 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0228 01:25:22.727608 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0228 01:25:26.340190 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0228 01:25:26.666362 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0228 01:25:56.409909 1 trace.go:236] Trace[564944117]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:8c3205ea-4665-4cfa-b8e9-274894d33bf2,client:199.204.45.129,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-4vkrp/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (28-Feb-2026 01:25:55.562) (total time: 847ms): Trace[564944117]: ["GuaranteedUpdate etcd3" audit-id:8c3205ea-4665-4cfa-b8e9-274894d33bf2,key:/pods/kube-system/cilium-4vkrp,type:*core.Pod,resource:pods 847ms (01:25:55.562) Trace[564944117]: ---"Txn call completed" 838ms (01:25:56.408)] Trace[564944117]: ---"Object stored in database" 839ms (01:25:56.408) Trace[564944117]: [847.494707ms] [847.494707ms] END I0228 01:25:56.435406 1 trace.go:236] Trace[540662699]: "Get" accept:application/vnd.kubernetes.protobuf, */*,audit-id:82090f44-3802-41be-b903-4066e7625f00,client:199.204.45.129,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-controller-manager,user-agent:kube-controller-manager/v1.28.13 (linux/amd64) kubernetes/024ab2a/leader-election,verb:GET (28-Feb-2026 01:25:55.809) (total time: 626ms): Trace[540662699]: ---"About to write a response" 626ms (01:25:56.435) Trace[540662699]: [626.255512ms] [626.255512ms] END I0228 01:25:57.668755 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0228 01:25:57.681434 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0228 01:25:57.973195 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0228 01:25:58.050289 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0228 01:25:58.254578 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0228 01:25:58.450439 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0228 01:25:58.663520 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0228 01:25:59.072254 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0228 01:26:00.664167 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0228 01:26:01.446957 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0228 01:26:01.704548 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0228 01:26:05.459358 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io