I0520 12:51:09.265634       1 options.go:220] external host was not specified, using 199.204.45.70
I0520 12:51:09.266758       1 server.go:148] Version: v1.28.13
I0520 12:51:09.266783       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0520 12:51:09.604081       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0520 12:51:09.615903       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0520 12:51:09.615950       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0520 12:51:09.616193       1 instance.go:298] Using reconciler: lease
I0520 12:51:09.669949       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0520 12:51:09.669976       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0520 12:51:09.956560       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0520 12:51:09.956798       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0520 12:51:10.404562       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0520 12:51:10.415813       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0520 12:51:10.415846       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.415854       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.416324       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0520 12:51:10.416342       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0520 12:51:10.417203       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0520 12:51:10.417911       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0520 12:51:10.417928       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0520 12:51:10.417933       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0520 12:51:10.419348       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0520 12:51:10.419364       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0520 12:51:10.420216       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0520 12:51:10.420233       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.420238       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.420794       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0520 12:51:10.420809       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.420844       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0520 12:51:10.421419       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0520 12:51:10.423031       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0520 12:51:10.423048       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.423053       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.423707       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0520 12:51:10.423722       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.423727       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.424419       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0520 12:51:10.424433       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0520 12:51:10.426199       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0520 12:51:10.426214       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.426218       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.426511       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0520 12:51:10.426524       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.426527       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.428193       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0520 12:51:10.428207       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.428210       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.429006       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0520 12:51:10.429884       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0520 12:51:10.429898       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.429903       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.438013       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0520 12:51:10.438071       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0520 12:51:10.438081       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0520 12:51:10.440710       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0520 12:51:10.440722       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0520 12:51:10.440727       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0520 12:51:10.442301       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0520 12:51:10.442340       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0520 12:51:10.479765       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0520 12:51:10.479799       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0520 12:51:10.873161       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0520 12:51:10.873261       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0520 12:51:10.873372       1 secure_serving.go:213] Serving securely on [::]:6443
I0520 12:51:10.873427       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0520 12:51:10.873437       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0520 12:51:10.873535       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0520 12:51:10.873546       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0520 12:51:10.873678       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0520 12:51:10.873174       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0520 12:51:10.873982       1 aggregator.go:164] waiting for initial CRD sync...
I0520 12:51:10.873987       1 controller.go:116] Starting legacy_token_tracking_controller
I0520 12:51:10.874002       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0520 12:51:10.874041       1 available_controller.go:423] Starting AvailableConditionController
I0520 12:51:10.874051       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0520 12:51:10.874064       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0520 12:51:10.874068       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0520 12:51:10.874407       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0520 12:51:10.874431       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0520 12:51:10.874463       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0520 12:51:10.874552       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0520 12:51:10.874568       1 controller.go:78] Starting OpenAPI AggregationController
I0520 12:51:10.874594       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0520 12:51:10.874693       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0520 12:51:10.875043       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0520 12:51:10.875094       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0520 12:51:10.875260       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0520 12:51:10.875402       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0520 12:51:10.877166       1 controller.go:134] Starting OpenAPI controller
I0520 12:51:10.877190       1 controller.go:85] Starting OpenAPI V3 controller
I0520 12:51:10.877204       1 naming_controller.go:291] Starting NamingConditionController
I0520 12:51:10.877215       1 establishing_controller.go:76] Starting EstablishingController
I0520 12:51:10.877235       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0520 12:51:10.877251       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0520 12:51:10.877261       1 crd_finalizer.go:266] Starting CRDFinalizer
I0520 12:51:10.905875       1 shared_informer.go:318] Caches are synced for node_authorizer
E0520 12:51:10.953423       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0520 12:51:10.973587       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0520 12:51:10.974095       1 shared_informer.go:318] Caches are synced for configmaps
I0520 12:51:10.974146       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0520 12:51:10.974157       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0520 12:51:10.974214       1 aggregator.go:166] initial CRD sync complete...
I0520 12:51:10.974234       1 autoregister_controller.go:141] Starting autoregister controller
I0520 12:51:10.974245       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0520 12:51:10.974256       1 cache.go:39] Caches are synced for autoregister controller
I0520 12:51:10.974636       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0520 12:51:10.974667       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0520 12:51:10.974871       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0520 12:51:10.977663       1 controller.go:624] quota admission added evaluator for: namespaces
E0520 12:51:11.120744       1 controller.go:145] while syncing ConfigMap "kube-system/kube-apiserver-legacy-service-account-token-tracking", err: namespaces "kube-system" not found
I0520 12:51:11.254895       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0520 12:51:11.882515       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0520 12:51:11.886826       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0520 12:51:11.886839       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0520 12:51:12.420181       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0520 12:51:12.465196       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0520 12:51:12.603977       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0520 12:51:12.614342       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.70]
I0520 12:51:12.616232       1 controller.go:624] quota admission added evaluator for: endpoints
I0520 12:51:12.621775       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0520 12:51:14.406303       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0520 12:51:14.414537       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0520 12:51:14.460700       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0520 12:51:14.998913       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0520 12:51:20.053729       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0520 12:51:20.349751       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0520 12:51:39.408294       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0520 12:51:39.430292       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0520 12:51:39.430330       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0520 12:51:39.435296       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0520 12:51:39.452545       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0520 12:51:39.469068       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0520 12:51:39.516904       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0520 12:51:39.516959       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0520 12:51:39.541869       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0520 12:51:39.605623       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0520 12:51:39.605805       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0520 12:51:39.639468       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0520 12:51:39.640129       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0520 12:51:39.665225       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0520 12:51:39.702843       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0520 12:51:39.833403       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:39.931184       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:40.103682       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0520 12:51:40.103736       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0520 12:51:40.129698       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:40.160067       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:40.201219       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:40.933720       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:40.957312       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:41.078548       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0520 12:51:46.468168       1 trace.go:236] Trace[246692171]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:2a6008a9-9c63-45a0-9720-45ccf9e849eb,client:199.204.45.70,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-qnphd/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (20-May-2026 12:51:45.845) (total time: 622ms):
Trace[246692171]: ["GuaranteedUpdate etcd3" audit-id:2a6008a9-9c63-45a0-9720-45ccf9e849eb,key:/pods/kube-system/cilium-qnphd,type:*core.Pod,resource:pods 622ms (12:51:45.846)
Trace[246692171]:  ---"Txn call completed" 606ms (12:51:46.467)]
Trace[246692171]: ---"Object stored in database" 608ms (12:51:46.467)
Trace[246692171]: [622.188688ms] [622.188688ms] END
I0520 12:51:46.471445       1 trace.go:236] Trace[165743678]: "Create" accept:application/json,audit-id:215c5ae7-4f62-47d9-8103-59b00d03f1f8,client:199.204.45.70,protocol:HTTP/2.0,resource:mutatingwebhookconfigurations,scope:resource,url:/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations,user-agent:Helm/3.11.2,verb:POST (20-May-2026 12:51:45.887) (total time: 584ms):
Trace[165743678]: ["Create etcd3" audit-id:215c5ae7-4f62-47d9-8103-59b00d03f1f8,key:/mutatingwebhookconfigurations/envoy-gateway-topology-injector.envoy-gateway-system,type:*admissionregistration.MutatingWebhookConfiguration,resource:mutatingwebhookconfigurations.admissionregistration.k8s.io 580ms (12:51:45.890)
Trace[165743678]:  ---"Txn call succeeded" 580ms (12:51:46.470)]
Trace[165743678]: [584.109636ms] [584.109636ms] END
I0520 12:51:46.968971       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0520 12:51:47.656691       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0520 12:51:47.668241       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0520 12:51:48.048495       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0520 12:51:48.251164       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0520 12:51:48.444954       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0520 12:51:48.655677       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0520 12:51:48.865457       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0520 12:51:49.079510       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0520 12:51:50.820237       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0520 12:51:51.272852       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0520 12:51:51.691019       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0520 12:51:52.407969       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0520 12:51:52.408013       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0520 12:51:55.898969       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0520 12:52:04.787705       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.97.152.71"}
W0520 12:52:04.815544       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.97.152.71:9443: connect: connection refused
E0520 12:52:04.815594       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.97.152.71:9443: connect: connection refused