I0908 15:39:01.319346 1 options.go:220] external host was not specified, using 162.253.55.54 I0908 15:39:01.320313 1 server.go:148] Version: v1.28.13 I0908 15:39:01.320366 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0908 15:39:01.721542 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0908 15:39:01.731312 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0908 15:39:01.731469 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0908 15:39:01.731774 1 instance.go:298] Using reconciler: lease I0908 15:39:02.281383 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0908 15:39:02.281418 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0908 15:39:02.591832 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0908 15:39:02.592109 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0908 15:39:03.100539 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0908 15:39:03.116737 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0908 15:39:03.116764 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.116771 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.117368 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0908 15:39:03.117383 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0908 15:39:03.118328 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0908 15:39:03.119406 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0908 15:39:03.119431 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0908 15:39:03.119440 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0908 15:39:03.121043 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0908 15:39:03.121059 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0908 15:39:03.121991 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0908 15:39:03.122007 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.122012 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.122644 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0908 15:39:03.122659 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.122698 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0908 15:39:03.123286 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0908 15:39:03.125140 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0908 15:39:03.125161 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.125166 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.125643 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0908 15:39:03.125658 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.125663 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.126610 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0908 15:39:03.126628 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0908 15:39:03.128351 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0908 15:39:03.128367 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.128373 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.128878 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0908 15:39:03.128895 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.128900 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.131151 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0908 15:39:03.131166 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.131171 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.132333 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0908 15:39:03.133511 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0908 15:39:03.133526 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.133531 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.145969 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0908 15:39:03.146008 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0908 15:39:03.146021 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0908 15:39:03.150224 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0908 15:39:03.150731 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0908 15:39:03.150749 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0908 15:39:03.151919 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0908 15:39:03.151949 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0908 15:39:03.190030 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0908 15:39:03.190057 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0908 15:39:03.701667 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0908 15:39:03.701670 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0908 15:39:03.701881 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0908 15:39:03.702163 1 secure_serving.go:213] Serving securely on [::]:6443 I0908 15:39:03.702215 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0908 15:39:03.702302 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0908 15:39:03.702409 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0908 15:39:03.703031 1 controller.go:78] Starting OpenAPI AggregationController I0908 15:39:03.703063 1 controller.go:134] Starting OpenAPI controller I0908 15:39:03.703102 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0908 15:39:03.703116 1 controller.go:85] Starting OpenAPI V3 controller I0908 15:39:03.703152 1 naming_controller.go:291] Starting NamingConditionController I0908 15:39:03.703195 1 controller.go:80] Starting OpenAPI V3 AggregationController I0908 15:39:03.703237 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0908 15:39:03.703273 1 crd_finalizer.go:266] Starting CRDFinalizer I0908 15:39:03.703367 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0908 15:39:03.703393 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0908 15:39:03.703428 1 system_namespaces_controller.go:67] Starting system namespaces controller I0908 15:39:03.702425 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0908 15:39:03.702647 1 controller.go:116] Starting legacy_token_tracking_controller I0908 15:39:03.702729 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0908 15:39:03.703665 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0908 15:39:03.702939 1 gc_controller.go:78] Starting apiserver lease garbage collector I0908 15:39:03.703202 1 establishing_controller.go:76] Starting EstablishingController I0908 15:39:03.703220 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0908 15:39:03.703648 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0908 15:39:03.702981 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0908 15:39:03.703983 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0908 15:39:03.708513 1 available_controller.go:423] Starting AvailableConditionController I0908 15:39:03.708527 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0908 15:39:03.708553 1 aggregator.go:164] waiting for initial CRD sync... I0908 15:39:03.708756 1 gc_controller.go:78] Starting apiserver lease garbage collector I0908 15:39:03.715759 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0908 15:39:03.715773 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0908 15:39:03.803332 1 apf_controller.go:379] Running API Priority and Fairness config worker I0908 15:39:03.803369 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0908 15:39:03.803738 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0908 15:39:03.803908 1 shared_informer.go:318] Caches are synced for configmaps I0908 15:39:03.804041 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0908 15:39:03.806150 1 controller.go:624] quota admission added evaluator for: namespaces I0908 15:39:03.808589 1 cache.go:39] Caches are synced for AvailableConditionController controller I0908 15:39:03.816060 1 shared_informer.go:318] Caches are synced for crd-autoregister I0908 15:39:03.816142 1 aggregator.go:166] initial CRD sync complete... I0908 15:39:03.816158 1 autoregister_controller.go:141] Starting autoregister controller I0908 15:39:03.816169 1 cache.go:32] Waiting for caches to sync for autoregister controller I0908 15:39:03.816185 1 cache.go:39] Caches are synced for autoregister controller I0908 15:39:03.821663 1 shared_informer.go:318] Caches are synced for node_authorizer I0908 15:39:03.838559 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0908 15:39:04.711083 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0908 15:39:04.716498 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0908 15:39:04.716537 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0908 15:39:05.229558 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0908 15:39:05.262985 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0908 15:39:05.313876 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0908 15:39:05.320596 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [162.253.55.54] I0908 15:39:05.321464 1 controller.go:624] quota admission added evaluator for: endpoints I0908 15:39:05.326732 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0908 15:39:05.845134 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0908 15:39:06.808890 1 controller.go:624] quota admission added evaluator for: deployments.apps I0908 15:39:06.838787 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0908 15:39:07.048499 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0908 15:39:10.885698 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0908 15:39:11.039498 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0908 15:39:38.878598 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0908 15:39:38.900274 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0908 15:39:38.907708 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0908 15:39:38.907910 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0908 15:39:38.933481 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0908 15:39:38.945380 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0908 15:39:38.960560 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0908 15:39:38.970297 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0908 15:39:38.983046 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0908 15:39:38.983076 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0908 15:39:39.000835 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0908 15:39:39.000871 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0908 15:39:39.054620 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0908 15:39:39.054709 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0908 15:39:39.080100 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0908 15:39:39.193370 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:39.258222 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:39.381710 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0908 15:39:39.381757 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0908 15:39:39.414089 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:39.467236 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:39.479163 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:40.162680 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:40.178070 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:40.253743 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0908 15:39:45.453477 1 controller.go:624] quota admission added evaluator for: jobs.batch I0908 15:39:50.611063 1 trace.go:236] Trace[809589304]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:46bdb21f-51d5-4523-88f4-29a09a714ce3,client:162.253.55.54,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-9d8gk/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (08-Sep-2026 15:39:50.052) (total time: 558ms): Trace[809589304]: ["GuaranteedUpdate etcd3" audit-id:46bdb21f-51d5-4523-88f4-29a09a714ce3,key:/pods/kube-system/cilium-9d8gk,type:*core.Pod,resource:pods 557ms (15:39:50.052) Trace[809589304]: ---"Txn call completed" 540ms (15:39:50.609)] Trace[809589304]: ---"About to check admission control" 14ms (15:39:50.067) Trace[809589304]: ---"Object stored in database" 542ms (15:39:50.610) Trace[809589304]: [558.288393ms] [558.288393ms] END I0908 15:39:52.039962 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0908 15:39:52.046805 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0908 15:39:52.073285 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0908 15:39:52.317129 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0908 15:39:52.624964 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0908 15:39:52.816382 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0908 15:39:53.238832 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0908 15:39:53.856776 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0908 15:39:54.825504 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0908 15:39:55.678661 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0908 15:39:55.860326 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0908 15:40:01.579309 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0908 15:40:01.579424 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0908 15:40:03.798504 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0908 15:40:11.306805 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.107.202.141"} W0908 15:40:11.351406 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.107.202.141:9443: connect: connection refused E0908 15:40:11.351451 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.107.202.141:9443: connect: connection refused