I0428 22:20:43.651721 1 options.go:220] external host was not specified, using 199.204.45.229 I0428 22:20:43.652735 1 server.go:148] Version: v1.28.13 I0428 22:20:43.652914 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0428 22:20:44.214374 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0428 22:20:44.227274 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0428 22:20:44.227303 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0428 22:20:44.227637 1 instance.go:298] Using reconciler: lease I0428 22:20:44.271555 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0428 22:20:44.271587 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0428 22:20:44.523215 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0428 22:20:44.523547 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0428 22:20:44.988895 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0428 22:20:45.013821 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0428 22:20:45.013853 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.013860 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.014489 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0428 22:20:45.014504 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0428 22:20:45.015481 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0428 22:20:45.016310 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0428 22:20:45.016327 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0428 22:20:45.016331 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0428 22:20:45.018157 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0428 22:20:45.018172 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0428 22:20:45.019166 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0428 22:20:45.019181 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.019186 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.019862 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0428 22:20:45.019876 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.019943 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0428 22:20:45.020581 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0428 22:20:45.022560 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0428 22:20:45.022575 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.022579 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.023094 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0428 22:20:45.023109 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.023113 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.023926 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0428 22:20:45.023940 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0428 22:20:45.025798 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0428 22:20:45.025814 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.025817 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.026403 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0428 22:20:45.026419 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.026423 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.028913 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0428 22:20:45.028929 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.028933 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.030127 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0428 22:20:45.031135 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0428 22:20:45.031152 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.031157 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.034404 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0428 22:20:45.034420 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0428 22:20:45.034424 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0428 22:20:45.035326 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0428 22:20:45.035341 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0428 22:20:45.035345 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0428 22:20:45.035803 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0428 22:20:45.035818 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0428 22:20:45.074318 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0428 22:20:45.074401 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0428 22:20:45.549560 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0428 22:20:45.549607 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0428 22:20:45.549872 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0428 22:20:45.550282 1 secure_serving.go:213] Serving securely on [::]:6443 I0428 22:20:45.550403 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0428 22:20:45.550475 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0428 22:20:45.550732 1 gc_controller.go:78] Starting apiserver lease garbage collector I0428 22:20:45.550802 1 controller.go:116] Starting legacy_token_tracking_controller I0428 22:20:45.550824 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0428 22:20:45.550849 1 aggregator.go:164] waiting for initial CRD sync... I0428 22:20:45.551041 1 gc_controller.go:78] Starting apiserver lease garbage collector I0428 22:20:45.551112 1 available_controller.go:423] Starting AvailableConditionController I0428 22:20:45.551123 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0428 22:20:45.551149 1 controller.go:80] Starting OpenAPI V3 AggregationController I0428 22:20:45.551200 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0428 22:20:45.551246 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0428 22:20:45.551280 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0428 22:20:45.550802 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0428 22:20:45.551562 1 system_namespaces_controller.go:67] Starting system namespaces controller I0428 22:20:45.551578 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0428 22:20:45.551592 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0428 22:20:45.551607 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0428 22:20:45.551620 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0428 22:20:45.551638 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0428 22:20:45.551709 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0428 22:20:45.552455 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0428 22:20:45.552663 1 controller.go:78] Starting OpenAPI AggregationController I0428 22:20:45.553691 1 controller.go:134] Starting OpenAPI controller I0428 22:20:45.553725 1 controller.go:85] Starting OpenAPI V3 controller I0428 22:20:45.553752 1 naming_controller.go:291] Starting NamingConditionController I0428 22:20:45.553767 1 establishing_controller.go:76] Starting EstablishingController I0428 22:20:45.553782 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0428 22:20:45.553797 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0428 22:20:45.553814 1 crd_finalizer.go:266] Starting CRDFinalizer I0428 22:20:45.615461 1 shared_informer.go:318] Caches are synced for node_authorizer E0428 22:20:45.650415 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0428 22:20:45.650610 1 apf_controller.go:379] Running API Priority and Fairness config worker I0428 22:20:45.650632 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0428 22:20:45.651048 1 shared_informer.go:318] Caches are synced for configmaps I0428 22:20:45.651217 1 cache.go:39] Caches are synced for AvailableConditionController controller I0428 22:20:45.651390 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0428 22:20:45.651684 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0428 22:20:45.651948 1 shared_informer.go:318] Caches are synced for crd-autoregister I0428 22:20:45.652050 1 aggregator.go:166] initial CRD sync complete... I0428 22:20:45.652072 1 autoregister_controller.go:141] Starting autoregister controller I0428 22:20:45.652079 1 cache.go:32] Waiting for caches to sync for autoregister controller I0428 22:20:45.652089 1 cache.go:39] Caches are synced for autoregister controller I0428 22:20:45.654911 1 controller.go:624] quota admission added evaluator for: namespaces I0428 22:20:45.702265 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0428 22:20:46.557842 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0428 22:20:46.565101 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0428 22:20:46.565129 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0428 22:20:47.139188 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0428 22:20:47.194400 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0428 22:20:47.279939 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0428 22:20:47.287342 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.229] I0428 22:20:47.289257 1 controller.go:624] quota admission added evaluator for: endpoints I0428 22:20:47.296097 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0428 22:20:48.980575 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0428 22:20:48.989412 1 controller.go:624] quota admission added evaluator for: deployments.apps I0428 22:20:49.034098 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0428 22:20:49.237371 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0428 22:20:54.849269 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0428 22:20:55.175970 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0428 22:21:13.854383 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 22:21:13.915372 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0428 22:21:13.939607 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0428 22:21:13.951857 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0428 22:21:13.971043 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 22:21:13.971099 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0428 22:21:13.990374 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0428 22:21:14.043567 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0428 22:21:14.043647 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0428 22:21:14.079583 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0428 22:21:14.115858 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 22:21:14.115898 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 22:21:14.154342 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 22:21:14.163676 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 22:21:14.163736 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 22:21:14.326295 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 22:21:14.326350 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 22:21:14.367092 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:14.484883 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:14.504206 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:14.566179 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:14.581825 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:15.233553 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:15.249842 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:15.308769 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 22:21:20.537966 1 trace.go:236] Trace[2027751057]: "Update" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:7f5ec16f-de3d-45e4-9ee9-c220ff72e914,client:199.204.45.229,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/instance,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PUT (28-Apr-2026 22:21:20.006) (total time: 531ms): Trace[2027751057]: ["GuaranteedUpdate etcd3" audit-id:7f5ec16f-de3d-45e4-9ee9-c220ff72e914,key:/leases/kube-node-lease/instance,type:*coordination.Lease,resource:leases.coordination.k8s.io 531ms (22:21:20.006) Trace[2027751057]: ---"Txn call completed" 530ms (22:21:20.537)] Trace[2027751057]: [531.609423ms] [531.609423ms] END I0428 22:21:20.539277 1 trace.go:236] Trace[62882794]: "Create" accept:application/json,audit-id:74adf244-71ae-4995-9032-2f340d9eec8b,client:199.204.45.229,protocol:HTTP/2.0,resource:mutatingwebhookconfigurations,scope:resource,url:/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations,user-agent:Helm/3.11.2,verb:POST (28-Apr-2026 22:21:20.010) (total time: 528ms): Trace[62882794]: ["Create etcd3" audit-id:74adf244-71ae-4995-9032-2f340d9eec8b,key:/mutatingwebhookconfigurations/envoy-gateway-topology-injector.envoy-gateway-system,type:*admissionregistration.MutatingWebhookConfiguration,resource:mutatingwebhookconfigurations.admissionregistration.k8s.io 524ms (22:21:20.015) Trace[62882794]: ---"Txn call succeeded" 522ms (22:21:20.537)] Trace[62882794]: [528.740752ms] [528.740752ms] END I0428 22:21:21.120227 1 controller.go:624] quota admission added evaluator for: jobs.batch I0428 22:21:22.251783 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 22:21:22.268492 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 22:21:22.284642 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 22:21:22.444278 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 22:21:22.633990 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 22:21:22.835730 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 22:21:23.434295 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 22:21:25.848591 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 22:21:25.871420 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 22:21:25.998016 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 22:21:26.095117 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0428 22:21:30.520933 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0428 22:21:30.520980 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0428 22:21:31.015386 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0428 22:21:40.192498 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.111.134.206"} W0428 22:21:40.226019 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.111.134.206:9443: connect: connection refused E0428 22:21:40.227931 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.111.134.206:9443: connect: connection refused