I0330 18:02:34.904052 1 options.go:220] external host was not specified, using 199.19.213.96 I0330 18:02:34.904880 1 server.go:148] Version: v1.28.13 I0330 18:02:34.904922 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0330 18:02:35.272054 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0330 18:02:35.279812 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0330 18:02:35.279862 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0330 18:02:35.280087 1 instance.go:298] Using reconciler: lease I0330 18:02:35.760133 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0330 18:02:35.760165 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0330 18:02:36.014067 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0330 18:02:36.014292 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0330 18:02:36.497776 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0330 18:02:36.508094 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0330 18:02:36.508118 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.508124 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.508504 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0330 18:02:36.508517 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0330 18:02:36.509162 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0330 18:02:36.509797 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0330 18:02:36.509811 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0330 18:02:36.509815 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0330 18:02:36.511095 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0330 18:02:36.511109 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0330 18:02:36.511690 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0330 18:02:36.511702 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.511706 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.512066 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0330 18:02:36.512077 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.512099 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0330 18:02:36.512508 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0330 18:02:36.513536 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0330 18:02:36.513549 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.513552 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.513865 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0330 18:02:36.513877 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.513880 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.514483 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0330 18:02:36.514496 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0330 18:02:36.515842 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0330 18:02:36.515858 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.515863 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.516194 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0330 18:02:36.516211 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.516215 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.522811 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0330 18:02:36.522861 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.522875 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.527507 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0330 18:02:36.529427 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0330 18:02:36.529449 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.529459 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.534337 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0330 18:02:36.534356 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0330 18:02:36.534361 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0330 18:02:36.535626 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0330 18:02:36.535644 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0330 18:02:36.535649 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0330 18:02:36.536419 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0330 18:02:36.536435 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0330 18:02:36.577474 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0330 18:02:36.577506 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0330 18:02:36.966170 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0330 18:02:36.966233 1 secure_serving.go:213] Serving securely on [::]:6443 I0330 18:02:36.966264 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0330 18:02:36.966307 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0330 18:02:36.966455 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0330 18:02:36.966674 1 controller.go:80] Starting OpenAPI V3 AggregationController I0330 18:02:36.966671 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0330 18:02:36.966818 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0330 18:02:36.966895 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0330 18:02:36.966918 1 aggregator.go:164] waiting for initial CRD sync... I0330 18:02:36.966973 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0330 18:02:36.966977 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0330 18:02:36.966991 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0330 18:02:36.967060 1 gc_controller.go:78] Starting apiserver lease garbage collector I0330 18:02:36.967141 1 controller.go:78] Starting OpenAPI AggregationController I0330 18:02:36.967183 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0330 18:02:36.967213 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0330 18:02:36.967283 1 system_namespaces_controller.go:67] Starting system namespaces controller I0330 18:02:36.967358 1 controller.go:134] Starting OpenAPI controller I0330 18:02:36.967415 1 controller.go:85] Starting OpenAPI V3 controller I0330 18:02:36.967446 1 naming_controller.go:291] Starting NamingConditionController I0330 18:02:36.967496 1 establishing_controller.go:76] Starting EstablishingController I0330 18:02:36.967522 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0330 18:02:36.967548 1 controller.go:116] Starting legacy_token_tracking_controller I0330 18:02:36.967574 1 crd_finalizer.go:266] Starting CRDFinalizer I0330 18:02:36.967580 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0330 18:02:36.967729 1 gc_controller.go:78] Starting apiserver lease garbage collector I0330 18:02:36.967758 1 available_controller.go:423] Starting AvailableConditionController I0330 18:02:36.967764 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0330 18:02:36.967809 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0330 18:02:36.967191 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0330 18:02:36.967925 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0330 18:02:36.967929 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0330 18:02:36.967561 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController E0330 18:02:37.037008 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0330 18:02:37.067441 1 shared_informer.go:318] Caches are synced for crd-autoregister I0330 18:02:37.067484 1 aggregator.go:166] initial CRD sync complete... I0330 18:02:37.067483 1 apf_controller.go:379] Running API Priority and Fairness config worker I0330 18:02:37.067506 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0330 18:02:37.067493 1 autoregister_controller.go:141] Starting autoregister controller I0330 18:02:37.067527 1 cache.go:32] Waiting for caches to sync for autoregister controller I0330 18:02:37.067529 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0330 18:02:37.067534 1 cache.go:39] Caches are synced for autoregister controller I0330 18:02:37.067800 1 shared_informer.go:318] Caches are synced for configmaps I0330 18:02:37.067828 1 cache.go:39] Caches are synced for AvailableConditionController controller I0330 18:02:37.067979 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0330 18:02:37.070061 1 controller.go:624] quota admission added evaluator for: namespaces I0330 18:02:37.072235 1 shared_informer.go:318] Caches are synced for node_authorizer I0330 18:02:37.240904 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0330 18:02:37.975678 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0330 18:02:37.981416 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0330 18:02:37.981474 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0330 18:02:38.557807 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0330 18:02:38.611200 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0330 18:02:38.678804 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0330 18:02:38.686647 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.96] I0330 18:02:38.688165 1 controller.go:624] quota admission added evaluator for: endpoints I0330 18:02:38.693801 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0330 18:02:40.579214 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0330 18:02:40.588662 1 controller.go:624] quota admission added evaluator for: deployments.apps I0330 18:02:40.627586 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0330 18:02:40.829454 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0330 18:02:45.176618 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0330 18:02:45.875095 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0330 18:03:05.167507 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0330 18:03:05.186009 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0330 18:03:05.206527 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0330 18:03:05.224980 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0330 18:03:05.225089 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0330 18:03:05.251147 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0330 18:03:05.266037 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0330 18:03:05.266080 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0330 18:03:05.286014 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0330 18:03:05.308441 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0330 18:03:05.342279 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0330 18:03:05.342436 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0330 18:03:05.384377 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0330 18:03:05.384479 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0330 18:03:05.434874 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0330 18:03:05.518754 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:05.583393 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:05.716470 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0330 18:03:05.716630 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0330 18:03:05.754798 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:05.798177 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:05.821610 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:06.447045 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:06.469226 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:06.563015 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0330 18:03:12.134544 1 trace.go:236] Trace[280217280]: "Update" accept:application/json, */*,audit-id:1da415bf-bafa-4c95-bc6b-3a3def93b12c,client:199.19.213.96,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (30-Mar-2026 18:03:11.587) (total time: 547ms): Trace[280217280]: ---"Conversion done" 21ms (18:03:11.613) Trace[280217280]: ---"Writing http response done" 36ms (18:03:12.134) Trace[280217280]: [547.326373ms] [547.326373ms] END I0330 18:03:12.644761 1 controller.go:624] quota admission added evaluator for: jobs.batch I0330 18:03:13.399833 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0330 18:03:13.409819 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0330 18:03:13.417682 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0330 18:03:13.577482 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0330 18:03:13.781537 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0330 18:03:13.976878 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0330 18:03:14.185126 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0330 18:03:16.395194 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0330 18:03:16.606864 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0330 18:03:17.202307 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0330 18:03:17.381750 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0330 18:03:31.537092 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0330 18:03:31.537154 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0330 18:03:32.031758 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0330 18:03:39.995715 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.111.93.40"} W0330 18:03:40.027611 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.111.93.40:9443: connect: connection refused E0330 18:03:40.027659 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.111.93.40:9443: connect: connection refused I0330 18:03:54.072321 1 handler.go:275] Adding GroupVersion acme.cert-manager.io v1 to ResourceManager I0330 18:03:54.116739 1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager I0330 18:03:54.163008 1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager I0330 18:03:54.187433 1 alloc.go:330] "allocated clusterIPs" service="cert-manager/cert-manager-webhook" clusterIPs={"IPv4":"10.107.185.37"} I0330 18:03:54.195998 1 alloc.go:330] "allocated clusterIPs" service="cert-manager/cert-manager" clusterIPs={"IPv4":"10.108.114.46"} I0330 18:03:54.210679 1 handler.go:275] Adding GroupVersion acme.cert-manager.io v1 to ResourceManager I0330 18:03:54.265242 1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager I0330 18:03:54.311161 1 handler.go:275] Adding GroupVersion cert-manager.io v1 to ResourceManager W0330 18:04:00.340325 1 dispatcher.go:217] Failed calling webhook, failing closed webhook.cert-manager.io: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/validate?timeout=30s": dial tcp 10.107.185.37:443: connect: connection refused I0330 18:04:05.335294 1 controller.go:624] quota admission added evaluator for: certificates.cert-manager.io I0330 18:04:27.096884 1 trace.go:236] Trace[452879185]: "Update" accept:application/json, */*,audit-id:67dbbf09-4267-418c-9467-aeaf2afe76ed,client:127.0.0.1,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/plndr-cp-lock,user-agent:kube-vip/v0.0.0 (linux/amd64) kubernetes/$Format,verb:PUT (30-Mar-2026 18:04:26.470) (total time: 626ms): Trace[452879185]: ["GuaranteedUpdate etcd3" audit-id:67dbbf09-4267-418c-9467-aeaf2afe76ed,key:/leases/kube-system/plndr-cp-lock,type:*coordination.Lease,resource:leases.coordination.k8s.io 625ms (18:04:26.470) Trace[452879185]: ---"Txn call completed" 624ms (18:04:27.096)] Trace[452879185]: [626.140836ms] [626.140836ms] END