I0821 02:27:20.783648 1 options.go:220] external host was not specified, using 199.19.213.193 I0821 02:27:20.785343 1 server.go:148] Version: v1.28.13 I0821 02:27:20.785374 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0821 02:27:21.266642 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0821 02:27:21.277425 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0821 02:27:21.277447 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0821 02:27:21.277680 1 instance.go:298] Using reconciler: lease I0821 02:27:21.324906 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0821 02:27:21.324938 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0821 02:27:21.614815 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0821 02:27:21.615012 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0821 02:27:22.074129 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0821 02:27:22.097456 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0821 02:27:22.097563 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.097643 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.098199 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0821 02:27:22.098235 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0821 02:27:22.099092 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0821 02:27:22.099974 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0821 02:27:22.100116 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0821 02:27:22.100167 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0821 02:27:22.101510 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0821 02:27:22.101578 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0821 02:27:22.102573 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0821 02:27:22.102612 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.102644 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.103579 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0821 02:27:22.103604 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.103739 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0821 02:27:22.104287 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0821 02:27:22.105783 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0821 02:27:22.105798 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.105802 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.106475 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0821 02:27:22.106489 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.106493 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.107217 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0821 02:27:22.107230 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0821 02:27:22.108859 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0821 02:27:22.108874 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.108878 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.109314 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0821 02:27:22.109329 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.109333 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.111319 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0821 02:27:22.111334 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.111338 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.112391 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0821 02:27:22.113427 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0821 02:27:22.113440 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.113444 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.116641 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0821 02:27:22.116657 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0821 02:27:22.116662 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0821 02:27:22.117415 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0821 02:27:22.117429 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0821 02:27:22.117433 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0821 02:27:22.117880 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0821 02:27:22.117894 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0821 02:27:22.170217 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0821 02:27:22.170244 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0821 02:27:22.669226 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0821 02:27:22.669245 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0821 02:27:22.669491 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0821 02:27:22.669708 1 secure_serving.go:213] Serving securely on [::]:6443 I0821 02:27:22.669814 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0821 02:27:22.669888 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0821 02:27:22.669919 1 controller.go:80] Starting OpenAPI V3 AggregationController I0821 02:27:22.669941 1 available_controller.go:423] Starting AvailableConditionController I0821 02:27:22.669973 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0821 02:27:22.670057 1 aggregator.go:164] waiting for initial CRD sync... I0821 02:27:22.670200 1 controller.go:134] Starting OpenAPI controller I0821 02:27:22.670246 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0821 02:27:22.670446 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0821 02:27:22.670482 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0821 02:27:22.670562 1 controller.go:78] Starting OpenAPI AggregationController I0821 02:27:22.670691 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0821 02:27:22.670982 1 gc_controller.go:78] Starting apiserver lease garbage collector I0821 02:27:22.671066 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0821 02:27:22.671090 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0821 02:27:22.671176 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0821 02:27:22.671234 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0821 02:27:22.671389 1 controller.go:116] Starting legacy_token_tracking_controller I0821 02:27:22.671447 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0821 02:27:22.671514 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0821 02:27:22.671646 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0821 02:27:22.670699 1 gc_controller.go:78] Starting apiserver lease garbage collector I0821 02:27:22.672405 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0821 02:27:22.672858 1 controller.go:85] Starting OpenAPI V3 controller I0821 02:27:22.672943 1 naming_controller.go:291] Starting NamingConditionController I0821 02:27:22.672984 1 establishing_controller.go:76] Starting EstablishingController I0821 02:27:22.673053 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0821 02:27:22.673101 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0821 02:27:22.673172 1 crd_finalizer.go:266] Starting CRDFinalizer I0821 02:27:22.673066 1 system_namespaces_controller.go:67] Starting system namespaces controller E0821 02:27:22.750669 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0821 02:27:22.767107 1 shared_informer.go:318] Caches are synced for node_authorizer I0821 02:27:22.770443 1 cache.go:39] Caches are synced for AvailableConditionController controller I0821 02:27:22.770581 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0821 02:27:22.771315 1 apf_controller.go:379] Running API Priority and Fairness config worker I0821 02:27:22.771333 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0821 02:27:22.771664 1 shared_informer.go:318] Caches are synced for configmaps I0821 02:27:22.771867 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0821 02:27:22.771894 1 shared_informer.go:318] Caches are synced for crd-autoregister I0821 02:27:22.771920 1 aggregator.go:166] initial CRD sync complete... I0821 02:27:22.771931 1 autoregister_controller.go:141] Starting autoregister controller I0821 02:27:22.771938 1 cache.go:32] Waiting for caches to sync for autoregister controller I0821 02:27:22.771946 1 cache.go:39] Caches are synced for autoregister controller I0821 02:27:22.774517 1 controller.go:624] quota admission added evaluator for: namespaces I0821 02:27:22.955138 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0821 02:27:23.682059 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0821 02:27:23.691454 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0821 02:27:23.691473 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0821 02:27:24.301695 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0821 02:27:24.350749 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0821 02:27:24.584547 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} I0821 02:27:25.178592 1 trace.go:236] Trace[78751057]: "GuaranteedUpdate etcd3" audit-id:,key:/masterleases/199.19.213.193,type:*v1.Endpoints,resource:apiServerIPInfo (21-Aug-2026 02:27:24.585) (total time: 592ms): Trace[78751057]: ---"initial value restored" 408ms (02:27:24.993) Trace[78751057]: ---"Transaction prepared" 74ms (02:27:25.068) Trace[78751057]: ---"Txn call completed" 109ms (02:27:25.178) Trace[78751057]: [592.737567ms] [592.737567ms] END W0821 02:27:25.183713 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.193] I0821 02:27:25.186005 1 controller.go:624] quota admission added evaluator for: endpoints I0821 02:27:25.195892 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0821 02:27:25.527178 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0821 02:27:26.617626 1 controller.go:624] quota admission added evaluator for: deployments.apps I0821 02:27:26.694434 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0821 02:27:26.900132 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0821 02:27:30.672188 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0821 02:27:30.770920 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0821 02:27:58.510515 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0821 02:27:58.600917 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0821 02:27:58.600959 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0821 02:27:58.609378 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0821 02:27:58.625493 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0821 02:27:58.647401 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0821 02:27:58.680481 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0821 02:27:58.723430 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0821 02:27:58.756710 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0821 02:27:58.756758 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0821 02:27:58.793855 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0821 02:27:58.793902 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0821 02:27:58.836114 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0821 02:27:58.861306 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0821 02:27:58.861450 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0821 02:27:58.991736 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0821 02:27:58.991802 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0821 02:27:59.016234 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:27:59.060961 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:27:59.114859 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:27:59.149764 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:27:59.157296 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:27:59.879039 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:27:59.958590 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:28:00.233791 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0821 02:28:04.955106 1 trace.go:236] Trace[1422391731]: "Update" accept:application/json, */*,audit-id:6364ce48-bb9a-4fcd-9e21-3d7a1542fe2f,client:199.19.213.193,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (21-Aug-2026 02:28:04.444) (total time: 510ms): Trace[1422391731]: ---"Conversion done" 23ms (02:28:04.474) Trace[1422391731]: ---"Writing http response done" 34ms (02:28:04.955) Trace[1422391731]: [510.694758ms] [510.694758ms] END I0821 02:28:05.126643 1 trace.go:236] Trace[2145335785]: "GuaranteedUpdate etcd3" audit-id:,key:/masterleases/199.19.213.193,type:*v1.Endpoints,resource:apiServerIPInfo (21-Aug-2026 02:28:04.491) (total time: 635ms): Trace[2145335785]: ---"Transaction prepared" 163ms (02:28:04.659) Trace[2145335785]: ---"Txn call completed" 467ms (02:28:05.126) Trace[2145335785]: [635.083292ms] [635.083292ms] END I0821 02:28:06.074586 1 controller.go:624] quota admission added evaluator for: jobs.batch I0821 02:28:06.424062 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0821 02:28:06.436217 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0821 02:28:06.616188 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0821 02:28:06.821100 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0821 02:28:07.045698 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0821 02:28:07.219846 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0821 02:28:07.428174 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0821 02:28:07.816451 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0821 02:28:09.436540 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0821 02:28:10.247470 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0821 02:28:10.448377 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0821 02:28:15.020678 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0821 02:28:15.020725 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0821 02:28:15.499568 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0821 02:28:24.040406 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.107.21.203"} W0821 02:28:24.071978 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.107.21.203:9443: connect: connection refused E0821 02:28:24.072092 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.107.21.203:9443: connect: connection refused