I0428 01:16:56.837876 1 options.go:220] external host was not specified, using 199.204.45.38 I0428 01:16:56.838744 1 server.go:148] Version: v1.28.13 I0428 01:16:56.838820 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0428 01:16:57.233836 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0428 01:16:57.246874 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0428 01:16:57.246897 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0428 01:16:57.247102 1 instance.go:298] Using reconciler: lease I0428 01:16:57.857932 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0428 01:16:57.857971 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0428 01:16:58.129216 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0428 01:16:58.129481 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0428 01:16:58.574627 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0428 01:16:58.596490 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0428 01:16:58.596523 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.596529 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.596993 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0428 01:16:58.597004 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0428 01:16:58.597689 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0428 01:16:58.598362 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0428 01:16:58.598374 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0428 01:16:58.598378 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0428 01:16:58.599568 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0428 01:16:58.599585 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0428 01:16:58.600319 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0428 01:16:58.600337 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.600343 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.600793 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0428 01:16:58.600807 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.600838 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0428 01:16:58.601264 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0428 01:16:58.603742 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0428 01:16:58.603778 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.603789 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.604632 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0428 01:16:58.604657 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.604665 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.605989 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0428 01:16:58.606012 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0428 01:16:58.608787 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0428 01:16:58.608814 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.608822 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.609518 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0428 01:16:58.609544 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.609551 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.612524 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0428 01:16:58.612538 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.612542 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.613518 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0428 01:16:58.614471 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0428 01:16:58.614484 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.614487 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.617487 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0428 01:16:58.617501 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0428 01:16:58.617505 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0428 01:16:58.618265 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0428 01:16:58.618278 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0428 01:16:58.618282 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0428 01:16:58.618759 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0428 01:16:58.618770 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0428 01:16:58.655058 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0428 01:16:58.655113 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0428 01:16:59.063375 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0428 01:16:59.063393 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0428 01:16:59.063530 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0428 01:16:59.063649 1 secure_serving.go:213] Serving securely on [::]:6443 I0428 01:16:59.063711 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0428 01:16:59.063937 1 system_namespaces_controller.go:67] Starting system namespaces controller I0428 01:16:59.063959 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0428 01:16:59.064048 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0428 01:16:59.064150 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0428 01:16:59.063986 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0428 01:16:59.064330 1 gc_controller.go:78] Starting apiserver lease garbage collector I0428 01:16:59.064354 1 controller.go:116] Starting legacy_token_tracking_controller I0428 01:16:59.064382 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0428 01:16:59.064817 1 gc_controller.go:78] Starting apiserver lease garbage collector I0428 01:16:59.064909 1 controller.go:80] Starting OpenAPI V3 AggregationController I0428 01:16:59.065983 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0428 01:16:59.066086 1 aggregator.go:164] waiting for initial CRD sync... I0428 01:16:59.066103 1 available_controller.go:423] Starting AvailableConditionController I0428 01:16:59.066110 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0428 01:16:59.066128 1 controller.go:78] Starting OpenAPI AggregationController I0428 01:16:59.066240 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0428 01:16:59.066351 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0428 01:16:59.066361 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0428 01:16:59.076063 1 controller.go:134] Starting OpenAPI controller I0428 01:16:59.077083 1 controller.go:85] Starting OpenAPI V3 controller I0428 01:16:59.077113 1 naming_controller.go:291] Starting NamingConditionController I0428 01:16:59.077125 1 establishing_controller.go:76] Starting EstablishingController I0428 01:16:59.077138 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0428 01:16:59.077149 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0428 01:16:59.077158 1 crd_finalizer.go:266] Starting CRDFinalizer I0428 01:16:59.077185 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0428 01:16:59.077256 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0428 01:16:59.084406 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0428 01:16:59.084418 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0428 01:16:59.084423 1 shared_informer.go:318] Caches are synced for crd-autoregister I0428 01:16:59.084451 1 aggregator.go:166] initial CRD sync complete... I0428 01:16:59.084457 1 autoregister_controller.go:141] Starting autoregister controller I0428 01:16:59.084461 1 cache.go:32] Waiting for caches to sync for autoregister controller I0428 01:16:59.134361 1 shared_informer.go:318] Caches are synced for node_authorizer I0428 01:16:59.165202 1 shared_informer.go:318] Caches are synced for configmaps I0428 01:16:59.165344 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0428 01:16:59.165706 1 controller.go:624] quota admission added evaluator for: namespaces I0428 01:16:59.166069 1 apf_controller.go:379] Running API Priority and Fairness config worker I0428 01:16:59.166096 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0428 01:16:59.166381 1 cache.go:39] Caches are synced for AvailableConditionController controller I0428 01:16:59.166497 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0428 01:16:59.184519 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0428 01:16:59.184738 1 cache.go:39] Caches are synced for autoregister controller I0428 01:17:00.073665 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0428 01:17:00.078444 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0428 01:17:00.078465 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0428 01:17:00.585458 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0428 01:17:00.626988 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0428 01:17:00.674926 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0428 01:17:00.681518 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.38] I0428 01:17:00.682809 1 controller.go:624] quota admission added evaluator for: endpoints I0428 01:17:00.687836 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0428 01:17:01.984894 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0428 01:17:02.421537 1 controller.go:624] quota admission added evaluator for: deployments.apps I0428 01:17:02.512548 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0428 01:17:02.718580 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0428 01:17:07.029798 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0428 01:17:07.136783 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0428 01:17:26.688000 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0428 01:17:26.693133 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0428 01:17:26.713232 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0428 01:17:26.735418 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0428 01:17:26.779614 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 01:17:26.779663 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0428 01:17:26.797493 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0428 01:17:26.823457 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0428 01:17:26.823493 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0428 01:17:26.876073 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 01:17:26.876109 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 01:17:26.884190 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 01:17:26.884347 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 01:17:26.889475 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 01:17:26.923094 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 01:17:27.059414 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0428 01:17:27.059470 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0428 01:17:27.067274 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:27.152680 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:27.182366 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:27.214344 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:27.224875 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:27.919621 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:27.921134 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:28.002971 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0428 01:17:33.246404 1 trace.go:236] Trace[114038420]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:77dd3797-7716-463e-979d-17654f423977,client:199.204.45.38,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-qwsqz/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (28-Apr-2026 01:17:32.610) (total time: 635ms): Trace[114038420]: ["GuaranteedUpdate etcd3" audit-id:77dd3797-7716-463e-979d-17654f423977,key:/pods/kube-system/cilium-qwsqz,type:*core.Pod,resource:pods 635ms (01:17:32.610) Trace[114038420]: ---"Txn call completed" 627ms (01:17:33.245)] Trace[114038420]: ---"Object stored in database" 628ms (01:17:33.245) Trace[114038420]: [635.875192ms] [635.875192ms] END I0428 01:17:33.247962 1 trace.go:236] Trace[1219406296]: "Create" accept:application/json,audit-id:33a89595-1260-432c-a816-a250f15fa702,client:199.204.45.38,protocol:HTTP/2.0,resource:mutatingwebhookconfigurations,scope:resource,url:/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations,user-agent:Helm/3.11.2,verb:POST (28-Apr-2026 01:17:32.650) (total time: 597ms): Trace[1219406296]: ["Create etcd3" audit-id:33a89595-1260-432c-a816-a250f15fa702,key:/mutatingwebhookconfigurations/envoy-gateway-topology-injector.envoy-gateway-system,type:*admissionregistration.MutatingWebhookConfiguration,resource:mutatingwebhookconfigurations.admissionregistration.k8s.io 595ms (01:17:32.651) Trace[1219406296]: ---"Txn call succeeded" 595ms (01:17:33.247)] Trace[1219406296]: [597.584424ms] [597.584424ms] END I0428 01:17:33.707141 1 controller.go:624] quota admission added evaluator for: jobs.batch I0428 01:17:34.443530 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 01:17:34.646138 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 01:17:34.892326 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 01:17:35.037380 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 01:17:35.245327 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 01:17:35.441065 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 01:17:35.653274 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0428 01:17:35.870859 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 01:17:36.056508 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 01:17:38.272605 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0428 01:17:38.682129 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0428 01:17:39.453651 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0428 01:17:39.453690 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0428 01:17:42.487591 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0428 01:17:51.815344 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.107.24.112"} W0428 01:17:51.846071 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.107.24.112:9443: connect: connection refused E0428 01:17:51.846107 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.107.24.112:9443: connect: connection refused