I0406 20:57:33.359060       1 options.go:220] external host was not specified, using 199.204.45.78
I0406 20:57:33.359894       1 server.go:148] Version: v1.28.13
I0406 20:57:33.359945       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0406 20:57:33.934757       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0406 20:57:33.945540       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0406 20:57:33.945556       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0406 20:57:33.945731       1 instance.go:298] Using reconciler: lease
I0406 20:57:33.985424       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0406 20:57:33.985442       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0406 20:57:34.250108       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0406 20:57:34.250495       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0406 20:57:34.695210       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0406 20:57:34.719560       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0406 20:57:34.719668       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.719744       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.720254       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0406 20:57:34.720300       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0406 20:57:34.722190       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0406 20:57:34.723459       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0406 20:57:34.723486       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0406 20:57:34.723594       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0406 20:57:34.725781       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0406 20:57:34.725812       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0406 20:57:34.727552       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0406 20:57:34.727584       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.727595       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.728816       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0406 20:57:34.728843       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.728905       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0406 20:57:34.729676       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0406 20:57:34.731638       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0406 20:57:34.731667       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.731675       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.732187       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0406 20:57:34.732202       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.732209       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.732961       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0406 20:57:34.732976       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0406 20:57:34.734733       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0406 20:57:34.734750       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.734756       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.735302       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0406 20:57:34.735322       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.735327       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.738661       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0406 20:57:34.738677       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.738683       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.740907       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0406 20:57:34.743973       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0406 20:57:34.744007       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.744016       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.749633       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0406 20:57:34.749648       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0406 20:57:34.749652       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0406 20:57:34.750568       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0406 20:57:34.750576       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0406 20:57:34.750580       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0406 20:57:34.751014       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0406 20:57:34.751027       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0406 20:57:34.784609       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0406 20:57:34.784773       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0406 20:57:35.170412       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0406 20:57:35.170454       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0406 20:57:35.170872       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0406 20:57:35.171914       1 secure_serving.go:213] Serving securely on [::]:6443
I0406 20:57:35.172050       1 aggregator.go:164] waiting for initial CRD sync...
I0406 20:57:35.172155       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0406 20:57:35.172218       1 controller.go:78] Starting OpenAPI AggregationController
I0406 20:57:35.172266       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0406 20:57:35.172490       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0406 20:57:35.172521       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0406 20:57:35.172668       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0406 20:57:35.172855       1 controller.go:116] Starting legacy_token_tracking_controller
I0406 20:57:35.172872       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0406 20:57:35.173084       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0406 20:57:35.173167       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0406 20:57:35.173241       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0406 20:57:35.173256       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0406 20:57:35.173289       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0406 20:57:35.173397       1 available_controller.go:423] Starting AvailableConditionController
I0406 20:57:35.173413       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0406 20:57:35.173494       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0406 20:57:35.173725       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0406 20:57:35.173982       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0406 20:57:35.174104       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0406 20:57:35.174112       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0406 20:57:35.174131       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0406 20:57:35.174137       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0406 20:57:35.174667       1 controller.go:134] Starting OpenAPI controller
I0406 20:57:35.174726       1 controller.go:85] Starting OpenAPI V3 controller
I0406 20:57:35.174769       1 naming_controller.go:291] Starting NamingConditionController
I0406 20:57:35.174797       1 establishing_controller.go:76] Starting EstablishingController
I0406 20:57:35.174817       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0406 20:57:35.175301       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0406 20:57:35.176263       1 crd_finalizer.go:266] Starting CRDFinalizer
I0406 20:57:35.234848       1 shared_informer.go:318] Caches are synced for node_authorizer
I0406 20:57:35.272939       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0406 20:57:35.273536       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0406 20:57:35.273600       1 shared_informer.go:318] Caches are synced for configmaps
I0406 20:57:35.274195       1 shared_informer.go:318] Caches are synced for crd-autoregister
E0406 20:57:35.274205       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0406 20:57:35.274306       1 aggregator.go:166] initial CRD sync complete...
I0406 20:57:35.274322       1 autoregister_controller.go:141] Starting autoregister controller
I0406 20:57:35.274331       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0406 20:57:35.274340       1 cache.go:39] Caches are synced for autoregister controller
I0406 20:57:35.274984       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0406 20:57:35.275091       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0406 20:57:35.275212       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0406 20:57:35.277699       1 controller.go:624] quota admission added evaluator for: namespaces
I0406 20:57:35.303197       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0406 20:57:36.189116       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0406 20:57:36.202794       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0406 20:57:36.202820       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0406 20:57:37.755181       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0406 20:57:37.806452       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0406 20:57:37.891686       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0406 20:57:37.908956       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.78]
I0406 20:57:37.910168       1 controller.go:624] quota admission added evaluator for: endpoints
I0406 20:57:37.922429       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0406 20:57:38.557948       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0406 20:57:39.989601       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0406 20:57:40.029883       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0406 20:57:40.167388       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0406 20:57:43.665860       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0406 20:57:43.762954       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0406 20:58:03.514430       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 20:58:03.523750       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0406 20:58:03.769864       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 20:58:03.770136       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0406 20:58:03.783654       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 20:58:03.783718       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 20:58:03.820967       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0406 20:58:03.853086       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0406 20:58:03.864095       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0406 20:58:03.889118       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0406 20:58:03.889164       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0406 20:58:03.928481       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 20:58:03.928535       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 20:58:03.945456       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0406 20:58:04.013833       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 20:58:04.172167       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 20:58:04.172213       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 20:58:04.175335       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:04.223781       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:04.259163       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:04.289976       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:04.306981       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:04.929928       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:04.947278       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:05.039805       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 20:58:10.361768       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0406 20:58:11.023496       1 trace.go:236] Trace[1059364571]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:bf03c505-0211-4f90-8273-f7217aa0c34e,client:199.204.45.78,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/pods,user-agent:kube-controller-manager/v1.28.13 (linux/amd64) kubernetes/024ab2a/system:serviceaccount:kube-system:job-controller,verb:POST (06-Apr-2026 20:58:10.477) (total time: 545ms):
Trace[1059364571]: ["Create etcd3" audit-id:bf03c505-0211-4f90-8273-f7217aa0c34e,key:/pods/envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4fdrp,type:*core.Pod,resource:pods 542ms (20:58:10.480)
Trace[1059364571]:  ---"Txn call succeeded" 542ms (20:58:11.023)]
Trace[1059364571]: [545.70662ms] [545.70662ms] END
I0406 20:58:12.392575       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 20:58:12.399641       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 20:58:12.408426       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 20:58:12.613006       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 20:58:12.786253       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 20:58:14.132504       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 20:58:14.142253       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 20:58:15.208268       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 20:58:15.609594       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 20:58:16.195221       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 20:58:16.397508       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0406 20:58:16.978299       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0406 20:58:16.978412       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0406 20:58:19.959075       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0406 20:58:28.306204       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.96.250.74"}
W0406 20:58:28.341917       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.96.250.74:9443: connect: connection refused
E0406 20:58:28.341960       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.96.250.74:9443: connect: connection refused