I0427 19:38:40.128710 1 options.go:220] external host was not specified, using 199.19.213.52 I0427 19:38:40.131898 1 server.go:148] Version: v1.28.13 I0427 19:38:40.131918 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0427 19:38:40.871382 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0427 19:38:40.883446 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0427 19:38:40.883463 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0427 19:38:40.883715 1 instance.go:298] Using reconciler: lease I0427 19:38:41.037810 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0427 19:38:41.037829 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0427 19:38:41.289622 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0427 19:38:41.289766 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0427 19:38:41.694640 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0427 19:38:41.705950 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0427 19:38:41.705972 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.705977 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.706511 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0427 19:38:41.706523 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0427 19:38:41.707091 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0427 19:38:41.707572 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0427 19:38:41.707579 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0427 19:38:41.707582 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0427 19:38:41.719774 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0427 19:38:41.719801 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0427 19:38:41.721407 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0427 19:38:41.721452 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.721469 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.721983 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0427 19:38:41.722018 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.722065 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0427 19:38:41.722574 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0427 19:38:41.723989 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0427 19:38:41.724029 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.724044 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.724445 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0427 19:38:41.724483 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.724498 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.725137 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0427 19:38:41.725174 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0427 19:38:41.726532 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0427 19:38:41.726573 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.726588 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.726942 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0427 19:38:41.726976 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.726991 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.728906 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0427 19:38:41.728959 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.728980 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.730239 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0427 19:38:41.731481 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0427 19:38:41.731530 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.731550 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.735529 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0427 19:38:41.735582 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0427 19:38:41.735603 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0427 19:38:41.736686 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0427 19:38:41.736746 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0427 19:38:41.736775 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0427 19:38:41.737463 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0427 19:38:41.737512 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0427 19:38:41.781546 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0427 19:38:41.781577 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0427 19:38:42.164716 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0427 19:38:42.164876 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0427 19:38:42.165075 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0427 19:38:42.165490 1 secure_serving.go:213] Serving securely on [::]:6443 I0427 19:38:42.165513 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0427 19:38:42.165655 1 controller.go:80] Starting OpenAPI V3 AggregationController I0427 19:38:42.165782 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0427 19:38:42.165831 1 controller.go:78] Starting OpenAPI AggregationController I0427 19:38:42.165855 1 system_namespaces_controller.go:67] Starting system namespaces controller I0427 19:38:42.165901 1 available_controller.go:423] Starting AvailableConditionController I0427 19:38:42.165919 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0427 19:38:42.165945 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0427 19:38:42.165959 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0427 19:38:42.165984 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0427 19:38:42.166155 1 gc_controller.go:78] Starting apiserver lease garbage collector I0427 19:38:42.166193 1 controller.go:116] Starting legacy_token_tracking_controller I0427 19:38:42.166209 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0427 19:38:42.166373 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0427 19:38:42.166390 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0427 19:38:42.166569 1 aggregator.go:164] waiting for initial CRD sync... I0427 19:38:42.166567 1 gc_controller.go:78] Starting apiserver lease garbage collector I0427 19:38:42.166610 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0427 19:38:42.166618 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0427 19:38:42.166757 1 controller.go:134] Starting OpenAPI controller I0427 19:38:42.166802 1 controller.go:85] Starting OpenAPI V3 controller I0427 19:38:42.166837 1 naming_controller.go:291] Starting NamingConditionController I0427 19:38:42.166863 1 establishing_controller.go:76] Starting EstablishingController I0427 19:38:42.166882 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0427 19:38:42.166906 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0427 19:38:42.166929 1 crd_finalizer.go:266] Starting CRDFinalizer I0427 19:38:42.167005 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0427 19:38:42.167132 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0427 19:38:42.166888 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0427 19:38:42.165860 1 apf_controller.go:374] Starting API Priority and Fairness config controller E0427 19:38:42.245208 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0427 19:38:42.266306 1 shared_informer.go:318] Caches are synced for configmaps I0427 19:38:42.266474 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0427 19:38:42.266583 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0427 19:38:42.266652 1 shared_informer.go:318] Caches are synced for crd-autoregister I0427 19:38:42.266723 1 cache.go:39] Caches are synced for AvailableConditionController controller I0427 19:38:42.266859 1 aggregator.go:166] initial CRD sync complete... I0427 19:38:42.266878 1 autoregister_controller.go:141] Starting autoregister controller I0427 19:38:42.266887 1 cache.go:32] Waiting for caches to sync for autoregister controller I0427 19:38:42.266897 1 cache.go:39] Caches are synced for autoregister controller I0427 19:38:42.267715 1 controller.go:624] quota admission added evaluator for: namespaces I0427 19:38:42.271520 1 shared_informer.go:318] Caches are synced for node_authorizer I0427 19:38:42.285578 1 apf_controller.go:379] Running API Priority and Fairness config worker I0427 19:38:42.285600 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0427 19:38:42.448426 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0427 19:38:43.174135 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0427 19:38:43.179220 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0427 19:38:43.179244 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0427 19:38:43.696339 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0427 19:38:43.743210 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0427 19:38:43.882776 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0427 19:38:43.893972 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.52] I0427 19:38:43.895302 1 controller.go:624] quota admission added evaluator for: endpoints I0427 19:38:43.902827 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0427 19:38:45.316950 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0427 19:38:45.335463 1 controller.go:624] quota admission added evaluator for: deployments.apps I0427 19:38:45.419549 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0427 19:38:45.622165 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0427 19:38:50.162272 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0427 19:38:50.459464 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0427 19:39:09.817562 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 19:39:09.817608 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 19:39:09.871651 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0427 19:39:09.895625 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 19:39:09.908552 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0427 19:39:09.921163 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0427 19:39:09.957589 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0427 19:39:09.980851 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0427 19:39:10.020665 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 19:39:10.020734 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0427 19:39:10.043833 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0427 19:39:10.044051 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0427 19:39:10.106516 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 19:39:10.106692 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 19:39:10.153123 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 19:39:10.225393 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:10.334009 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:10.505979 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 19:39:10.506036 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 19:39:10.525384 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:10.574927 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:10.583417 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:11.265766 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:11.363319 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 19:39:16.022016 1 trace.go:236] Trace[518770994]: "Get" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:a2128b33-51cd-4004-83c7-c98bb57185e2,client:199.19.213.52,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-pslm6,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:GET (27-Apr-2026 19:39:15.508) (total time: 513ms): Trace[518770994]: ---"About to write a response" 513ms (19:39:16.021) Trace[518770994]: [513.781819ms] [513.781819ms] END I0427 19:39:16.053162 1 trace.go:236] Trace[782692804]: "Update" accept:application/json, */*,audit-id:16e2aee7-a730-4502-aa9a-735ac3c3cf09,client:199.19.213.52,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (27-Apr-2026 19:39:15.387) (total time: 665ms): Trace[782692804]: ---"Conversion done" 20ms (19:39:15.414) Trace[782692804]: ["GuaranteedUpdate etcd3" audit-id:16e2aee7-a730-4502-aa9a-735ac3c3cf09,key:/secrets/envoy-gateway-system/sh.helm.release.v1.envoy-gateway.v1,type:*core.Secret,resource:secrets 638ms (19:39:15.414) Trace[782692804]: ---"Txn call completed" 601ms (19:39:16.020)] Trace[782692804]: ---"Writing http response done" 31ms (19:39:16.053) Trace[782692804]: [665.435261ms] [665.435261ms] END I0427 19:39:16.571379 1 trace.go:236] Trace[715613789]: "Create" accept:application/json,audit-id:1e661c31-9720-4612-8082-51a26c840154,client:199.19.213.52,protocol:HTTP/2.0,resource:clusterrolebindings,scope:resource,url:/apis/rbac.authorization.k8s.io/v1/clusterrolebindings,user-agent:Helm/3.11.2,verb:POST (27-Apr-2026 19:39:16.071) (total time: 500ms): Trace[715613789]: [500.267735ms] [500.267735ms] END I0427 19:39:17.597878 1 controller.go:624] quota admission added evaluator for: jobs.batch I0427 19:39:18.111635 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 19:39:18.318209 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 19:39:18.498285 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 19:39:18.697410 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 19:39:18.906421 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 19:39:19.094805 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 19:39:19.300168 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 19:39:19.580262 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 19:39:19.790687 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 19:39:21.951537 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 19:39:22.280209 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0427 19:39:33.393716 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0427 19:39:33.393783 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0427 19:39:33.888124 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0427 19:39:41.732546 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.98.181.245"} W0427 19:39:41.777123 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.98.181.245:9443: connect: connection refused E0427 19:39:41.777170 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.98.181.245:9443: connect: connection refused