I1004 09:49:34.423060 1 options.go:220] external host was not specified, using 162.253.55.186 I1004 09:49:34.423948 1 server.go:148] Version: v1.28.13 I1004 09:49:34.423975 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I1004 09:49:34.767432 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I1004 09:49:34.788183 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I1004 09:49:34.788278 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I1004 09:49:34.788681 1 instance.go:298] Using reconciler: lease I1004 09:49:35.231482 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W1004 09:49:35.231512 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I1004 09:49:35.459099 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I1004 09:49:35.459362 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I1004 09:49:35.983596 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I1004 09:49:36.012503 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W1004 09:49:36.012545 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.012555 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.013250 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W1004 09:49:36.013274 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I1004 09:49:36.014486 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I1004 09:49:36.015595 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W1004 09:49:36.015617 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W1004 09:49:36.015624 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I1004 09:49:36.017861 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W1004 09:49:36.017884 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I1004 09:49:36.019194 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W1004 09:49:36.019216 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.019223 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.020183 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W1004 09:49:36.020206 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.020267 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I1004 09:49:36.021343 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I1004 09:49:36.023275 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W1004 09:49:36.023292 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.023298 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.023869 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W1004 09:49:36.023881 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.023886 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.024763 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W1004 09:49:36.024777 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I1004 09:49:36.026783 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W1004 09:49:36.026798 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.026803 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.027308 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W1004 09:49:36.027325 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.027330 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.029838 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W1004 09:49:36.029852 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.029857 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.031019 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I1004 09:49:36.032161 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W1004 09:49:36.032176 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.032181 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.036379 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W1004 09:49:36.036395 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W1004 09:49:36.036400 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I1004 09:49:36.038067 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W1004 09:49:36.038081 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W1004 09:49:36.038086 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I1004 09:49:36.038925 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W1004 09:49:36.038971 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I1004 09:49:36.088152 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W1004 09:49:36.088181 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I1004 09:49:36.620558 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I1004 09:49:36.620558 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I1004 09:49:36.620970 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I1004 09:49:36.621391 1 secure_serving.go:213] Serving securely on [::]:6443 I1004 09:49:36.621536 1 controller.go:78] Starting OpenAPI AggregationController I1004 09:49:36.621577 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I1004 09:49:36.621623 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I1004 09:49:36.621632 1 apf_controller.go:374] Starting API Priority and Fairness config controller I1004 09:49:36.621690 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I1004 09:49:36.621756 1 customresource_discovery_controller.go:289] Starting DiscoveryController I1004 09:49:36.621855 1 controller.go:134] Starting OpenAPI controller I1004 09:49:36.621907 1 controller.go:85] Starting OpenAPI V3 controller I1004 09:49:36.621941 1 naming_controller.go:291] Starting NamingConditionController I1004 09:49:36.621974 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I1004 09:49:36.621996 1 crd_finalizer.go:266] Starting CRDFinalizer I1004 09:49:36.622027 1 system_namespaces_controller.go:67] Starting system namespaces controller I1004 09:49:36.622152 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I1004 09:49:36.622344 1 establishing_controller.go:76] Starting EstablishingController I1004 09:49:36.622451 1 available_controller.go:423] Starting AvailableConditionController I1004 09:49:36.622466 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I1004 09:49:36.622796 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I1004 09:49:36.622856 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I1004 09:49:36.623176 1 controller.go:116] Starting legacy_token_tracking_controller I1004 09:49:36.623194 1 shared_informer.go:311] Waiting for caches to sync for configmaps I1004 09:49:36.623395 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I1004 09:49:36.623429 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I1004 09:49:36.623477 1 aggregator.go:164] waiting for initial CRD sync... I1004 09:49:36.623521 1 controller.go:80] Starting OpenAPI V3 AggregationController I1004 09:49:36.624203 1 gc_controller.go:78] Starting apiserver lease garbage collector I1004 09:49:36.622806 1 gc_controller.go:78] Starting apiserver lease garbage collector I1004 09:49:36.625063 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I1004 09:49:36.625254 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I1004 09:49:36.625756 1 crdregistration_controller.go:111] Starting crd-autoregister controller I1004 09:49:36.625770 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I1004 09:49:36.671387 1 shared_informer.go:318] Caches are synced for node_authorizer E1004 09:49:36.708527 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I1004 09:49:36.721858 1 apf_controller.go:379] Running API Priority and Fairness config worker I1004 09:49:36.721875 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I1004 09:49:36.722625 1 cache.go:39] Caches are synced for AvailableConditionController controller I1004 09:49:36.723282 1 shared_informer.go:318] Caches are synced for configmaps I1004 09:49:36.723470 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I1004 09:49:36.723518 1 controller.go:624] quota admission added evaluator for: namespaces I1004 09:49:36.723569 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I1004 09:49:36.726025 1 shared_informer.go:318] Caches are synced for crd-autoregister I1004 09:49:36.726080 1 aggregator.go:166] initial CRD sync complete... I1004 09:49:36.726093 1 autoregister_controller.go:141] Starting autoregister controller I1004 09:49:36.726104 1 cache.go:32] Waiting for caches to sync for autoregister controller I1004 09:49:36.726114 1 cache.go:39] Caches are synced for autoregister controller I1004 09:49:36.929322 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I1004 09:49:37.685945 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I1004 09:49:37.700530 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I1004 09:49:37.700564 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I1004 09:49:39.849556 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I1004 09:49:39.949670 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I1004 09:49:40.083981 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W1004 09:49:40.103264 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [162.253.55.186] I1004 09:49:40.105258 1 controller.go:624] quota admission added evaluator for: endpoints I1004 09:49:40.115448 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I1004 09:49:42.024408 1 controller.go:624] quota admission added evaluator for: serviceaccounts I1004 09:49:42.040446 1 controller.go:624] quota admission added evaluator for: deployments.apps I1004 09:49:42.120689 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I1004 09:49:42.151927 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I1004 09:49:47.258015 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I1004 09:49:47.344197 1 controller.go:624] quota admission added evaluator for: replicasets.apps I1004 09:50:19.112396 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I1004 09:50:19.173328 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I1004 09:50:19.203765 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I1004 09:50:19.203805 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I1004 09:50:19.263384 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I1004 09:50:19.281065 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I1004 09:50:19.281195 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I1004 09:50:19.307877 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I1004 09:50:19.344774 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I1004 09:50:19.404458 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I1004 09:50:19.567699 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I1004 09:50:19.567763 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I1004 09:50:19.608191 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I1004 09:50:19.608255 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I1004 09:50:19.705594 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I1004 09:50:19.890909 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I1004 09:50:19.890967 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I1004 09:50:19.956620 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.000805 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.036879 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.085437 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.118515 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.510100 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.541906 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:20.625889 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I1004 09:50:26.643101 1 trace.go:236] Trace[1072933407]: "Update" accept:application/json, */*,audit-id:86a6bbf9-9ecb-48dd-b616-f9a12b229206,client:162.253.55.186,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (04-Oct-2026 09:50:26.073) (total time: 569ms): Trace[1072933407]: ---"Conversion done" 27ms (09:50:26.105) Trace[1072933407]: ---"Writing http response done" 42ms (09:50:26.642) Trace[1072933407]: [569.664846ms] [569.664846ms] END I1004 09:50:26.672715 1 controller.go:624] quota admission added evaluator for: jobs.batch I1004 09:50:27.859029 1 trace.go:236] Trace[1360137178]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:77e6c0cb-df35-47df-8f02-426da4368843,client:162.253.55.186,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/pods,user-agent:kube-controller-manager/v1.28.13 (linux/amd64) kubernetes/024ab2a/system:serviceaccount:kube-system:job-controller,verb:POST (04-Oct-2026 09:50:27.117) (total time: 741ms): Trace[1360137178]: ["Create etcd3" audit-id:77e6c0cb-df35-47df-8f02-426da4368843,key:/pods/envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6cc2q,type:*core.Pod,resource:pods 736ms (09:50:27.122) Trace[1360137178]: ---"Txn call succeeded" 736ms (09:50:27.858)] Trace[1360137178]: [741.030548ms] [741.030548ms] END I1004 09:50:30.318511 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I1004 09:50:30.361310 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I1004 09:50:30.382013 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I1004 09:50:30.403233 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I1004 09:50:30.521071 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I1004 09:50:30.699397 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I1004 09:50:32.716751 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I1004 09:50:33.114423 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I1004 09:50:33.485687 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I1004 09:50:33.971846 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I1004 09:50:34.121226 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W1004 09:50:34.297946 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E1004 09:50:34.298028 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I1004 09:50:37.272243 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I1004 09:50:44.847080 1 trace.go:236] Trace[753835911]: "Update" accept:application/vnd.kubernetes.protobuf, */*,audit-id:da3ccc97-6462-44a4-9215-be3d4d2f0c3b,client:162.253.55.186,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/kube-scheduler,user-agent:kube-scheduler/v1.28.13 (linux/amd64) kubernetes/024ab2a/leader-election,verb:PUT (04-Oct-2026 09:50:44.329) (total time: 517ms): Trace[753835911]: ["GuaranteedUpdate etcd3" audit-id:da3ccc97-6462-44a4-9215-be3d4d2f0c3b,key:/leases/kube-system/kube-scheduler,type:*coordination.Lease,resource:leases.coordination.k8s.io 517ms (09:50:44.329) Trace[753835911]: ---"Txn call completed" 516ms (09:50:44.846)] Trace[753835911]: [517.727594ms] [517.727594ms] END I1004 09:50:48.601043 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.109.102.241"} W1004 09:50:48.666651 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.109.102.241:9443: connect: connection refused E1004 09:50:48.666725 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.109.102.241:9443: connect: connection refused