apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-04-15T17:58:04Z" generateName: cilium-operator-75968c57df- generation: 1 labels: app.kubernetes.io/name: cilium-operator app.kubernetes.io/part-of: cilium io.cilium/app: operator name: cilium-operator pod-template-hash: 75968c57df name: cilium-operator-75968c57df-gvfz4 namespace: kube-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: cilium-operator-75968c57df uid: f0383450-e643-4f5e-b23c-50933604d5c7 resourceVersion: "1447" uid: c8831f85-093a-451a-95fd-27164f4cedf5 spec: affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchLabels: io.cilium/app: operator topologyKey: kubernetes.io/hostname automountServiceAccountToken: true containers: - args: - --config-dir=/tmp/cilium/config-map - --debug=$(CILIUM_DEBUG) command: - cilium-operator-generic env: - name: K8S_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: CILIUM_K8S_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: CILIUM_DEBUG valueFrom: configMapKeyRef: key: debug name: cilium-config optional: true image: quay.io/cilium/operator-generic:v1.14.8 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: host: 127.0.0.1 path: /healthz port: 9234 scheme: HTTP initialDelaySeconds: 60 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 3 name: cilium-operator readinessProbe: failureThreshold: 5 httpGet: host: 127.0.0.1 path: /healthz port: 9234 scheme: HTTP periodSeconds: 5 successThreshold: 1 timeoutSeconds: 3 resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: FallbackToLogsOnError volumeMounts: - mountPath: /tmp/cilium/config-map name: cilium-config-path readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rkk6r readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true hostNetwork: true nodeName: controller-2 nodeSelector: kubernetes.io/os: linux node-role.kubernetes.io/control-plane: "" preemptionPolicy: PreemptLowerPriority priority: 2000000000 priorityClassName: system-cluster-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: cilium-operator serviceAccountName: cilium-operator terminationGracePeriodSeconds: 30 tolerations: - operator: Exists volumes: - configMap: defaultMode: 420 name: cilium-config name: cilium-config-path - name: kube-api-access-rkk6r projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-04-15T17:58:52Z" observedGeneration: 1 status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-04-15T17:58:04Z" observedGeneration: 1 status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-04-15T17:59:07Z" message: 'containers with unready status: [cilium-operator]' observedGeneration: 1 reason: ContainersNotReady status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-04-15T17:59:07Z" message: 'containers with unready status: [cilium-operator]' observedGeneration: 1 reason: ContainersNotReady status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-04-15T17:58:04Z" observedGeneration: 1 status: "True" type: PodScheduled containerStatuses: - containerID: containerd://80a7ac25a98015b4387569c5a9068cdab129a937c78ac0413b8795b9b6c12173 image: quay.io/cilium/operator-generic:v1.14.8 imageID: quay.io/cilium/operator-generic@sha256:56d373c12483c09964a00a29246595917603a077a298aa90a98e4de32c86b7dc lastState: terminated: containerID: containerd://e3e042d7432f5cb5bb709bf2568c63e7344851ffd358a7d0a9c8493577e84674 exitCode: 1 finishedAt: "2026-04-15T17:59:06Z" message: |2 installed and up-to-date" name=ciliumcidrgroups.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumidentities.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumpodippools.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliuml2announcementpolicies.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumnodes.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumclusterwidenetworkpolicies.cilium.io subsys=k8s level=warning msg="unrecognized format \"int64\"" subsys=klog level=warning msg="unrecognized format \"idn-hostname\"" subsys=klog level=error msg="Start hook failed" error="unable to create CRDs: Unable to create custom resource definition: etcdserver: request timed out" function="apis.createCRDs.func1 (cell.go:64)" subsys=hive level=error msg="Failed to start when elected leader, shutting down" error="unable to create CRDs: Unable to create custom resource definition: etcdserver: request timed out" subsys=cilium-operator-generic level=info msg=Stopping subsys=hive level=info msg="Stop hook executed" duration="114.743µs" function="*api.server.Stop" subsys=hive level=info msg="Leader election lost" operator-id=controller-2-ugJvIEEPoN subsys=cilium-operator-generic level=info msg="Stop hook executed" duration=7.828321ms function="cmd.registerOperatorHooks.func2 (root.go:166)" subsys=hive level=info msg="Stop hook executed" duration="24.91µs" function="client.(*compositeClientset).onStop" subsys=hive level=info msg="Stopped gops server" address="127.0.0.1:9891" subsys=gops level=info msg="Stop hook executed" duration="216.736µs" function="gops.registerGopsHooks.func2 (cell.go:50)" subsys=hive level=fatal msg="unable to create CRDs: Unable to create custom resource definition: etcdserver: request timed out" subsys=cilium-operator-generic reason: Error startedAt: "2026-04-15T17:58:51Z" name: cilium-operator ready: false resources: {} restartCount: 1 started: true state: running: startedAt: "2026-04-15T17:59:07Z" user: linux: gid: 0 supplementalGroups: - 0 uid: 0 volumeMounts: - mountPath: /tmp/cilium/config-map name: cilium-config-path readOnly: true recursiveReadOnly: Disabled - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-rkk6r readOnly: true recursiveReadOnly: Disabled hostIP: 199.19.213.152 hostIPs: - ip: 199.19.213.152 observedGeneration: 1 phase: Running podIP: 199.19.213.152 podIPs: - ip: 199.19.213.152 qosClass: BestEffort startTime: "2026-04-15T17:58:04Z"