I0406 17:01:28.280765       1 options.go:220] external host was not specified, using 199.204.45.156
I0406 17:01:28.283117       1 server.go:148] Version: v1.28.13
I0406 17:01:28.283149       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0406 17:01:28.591103       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0406 17:01:28.612339       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0406 17:01:28.612374       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0406 17:01:28.612757       1 instance.go:298] Using reconciler: lease
I0406 17:01:28.888523       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0406 17:01:28.888553       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0406 17:01:29.119088       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0406 17:01:29.119401       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0406 17:01:29.547268       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0406 17:01:29.559510       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0406 17:01:29.559618       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.559689       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.560223       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0406 17:01:29.560304       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0406 17:01:29.561228       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0406 17:01:29.562048       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0406 17:01:29.562131       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0406 17:01:29.562190       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0406 17:01:29.563669       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0406 17:01:29.563754       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0406 17:01:29.564580       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0406 17:01:29.564659       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.564738       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.565329       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0406 17:01:29.565389       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.565476       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0406 17:01:29.565913       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0406 17:01:29.567287       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0406 17:01:29.567355       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.567408       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.567782       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0406 17:01:29.567838       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.567893       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.568477       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0406 17:01:29.568534       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0406 17:01:29.569746       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0406 17:01:29.569806       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.569863       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.570246       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0406 17:01:29.570316       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.570362       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.571988       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0406 17:01:29.572047       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.572104       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.572985       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0406 17:01:29.573771       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0406 17:01:29.573829       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.573877       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.576598       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0406 17:01:29.576640       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0406 17:01:29.576654       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0406 17:01:29.577339       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0406 17:01:29.577375       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0406 17:01:29.577431       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0406 17:01:29.578811       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0406 17:01:29.578856       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0406 17:01:29.614289       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0406 17:01:29.614326       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0406 17:01:29.998434       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0406 17:01:29.998467       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0406 17:01:29.998653       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0406 17:01:29.998837       1 secure_serving.go:213] Serving securely on [::]:6443
I0406 17:01:29.998903       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0406 17:01:29.998962       1 available_controller.go:423] Starting AvailableConditionController
I0406 17:01:29.998975       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0406 17:01:29.998969       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0406 17:01:29.999179       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0406 17:01:29.999501       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0406 17:01:29.999865       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0406 17:01:29.999975       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0406 17:01:30.000115       1 controller.go:78] Starting OpenAPI AggregationController
I0406 17:01:30.000214       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0406 17:01:30.000353       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0406 17:01:30.000397       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0406 17:01:30.000928       1 controller.go:116] Starting legacy_token_tracking_controller
I0406 17:01:30.000958       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0406 17:01:30.000996       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0406 17:01:30.001112       1 aggregator.go:164] waiting for initial CRD sync...
I0406 17:01:30.001344       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0406 17:01:30.003879       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0406 17:01:30.004026       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0406 17:01:30.004694       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0406 17:01:30.004966       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0406 17:01:30.005084       1 controller.go:134] Starting OpenAPI controller
I0406 17:01:30.005257       1 controller.go:85] Starting OpenAPI V3 controller
I0406 17:01:30.005307       1 naming_controller.go:291] Starting NamingConditionController
I0406 17:01:30.005334       1 establishing_controller.go:76] Starting EstablishingController
I0406 17:01:30.005371       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0406 17:01:30.005407       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0406 17:01:30.005434       1 crd_finalizer.go:266] Starting CRDFinalizer
I0406 17:01:29.999974       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0406 17:01:30.013392       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0406 17:01:30.091251       1 shared_informer.go:318] Caches are synced for node_authorizer
I0406 17:01:30.099671       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0406 17:01:30.100507       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0406 17:01:30.101008       1 shared_informer.go:318] Caches are synced for configmaps
I0406 17:01:30.101179       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0406 17:01:30.101202       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0406 17:01:30.102678       1 controller.go:624] quota admission added evaluator for: namespaces
I0406 17:01:30.105393       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0406 17:01:30.105498       1 aggregator.go:166] initial CRD sync complete...
I0406 17:01:30.105514       1 autoregister_controller.go:141] Starting autoregister controller
I0406 17:01:30.105524       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0406 17:01:30.105533       1 cache.go:39] Caches are synced for autoregister controller
I0406 17:01:30.113703       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0406 17:01:30.120201       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0406 17:01:31.008052       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0406 17:01:31.012822       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0406 17:01:31.012843       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0406 17:01:31.583076       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0406 17:01:31.631867       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0406 17:01:31.717884       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0406 17:01:31.727101       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.156]
I0406 17:01:31.728645       1 controller.go:624] quota admission added evaluator for: endpoints
I0406 17:01:31.737188       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0406 17:01:33.158633       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0406 17:01:33.330102       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0406 17:01:33.434096       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0406 17:01:33.640939       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0406 17:01:38.056462       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0406 17:01:38.403336       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0406 17:01:58.223672       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0406 17:01:58.263949       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 17:01:58.264060       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 17:01:58.314035       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0406 17:01:58.331468       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0406 17:01:58.350351       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0406 17:01:58.359760       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0406 17:01:58.379451       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 17:01:58.379514       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0406 17:01:58.388134       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 17:01:58.435080       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0406 17:01:58.435146       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0406 17:01:58.510783       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 17:01:58.510846       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 17:01:58.562120       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 17:01:58.681843       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:58.780762       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:58.938791       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0406 17:01:58.938917       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0406 17:01:58.976914       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:59.010665       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:59.056546       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:59.663611       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:59.685162       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:01:59.800917       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0406 17:02:05.343507       1 trace.go:236] Trace[1313047616]: "Create" accept:application/json,audit-id:54da98ca-bc98-4765-ae44-e88193059765,client:199.204.45.156,protocol:HTTP/2.0,resource:mutatingwebhookconfigurations,scope:resource,url:/apis/admissionregistration.k8s.io/v1/mutatingwebhookconfigurations,user-agent:Helm/3.11.2,verb:POST (06-Apr-2026 17:02:04.826) (total time: 516ms):
Trace[1313047616]: ["Create etcd3" audit-id:54da98ca-bc98-4765-ae44-e88193059765,key:/mutatingwebhookconfigurations/envoy-gateway-topology-injector.envoy-gateway-system,type:*admissionregistration.MutatingWebhookConfiguration,resource:mutatingwebhookconfigurations.admissionregistration.k8s.io 515ms (17:02:04.828)
Trace[1313047616]:  ---"Txn call succeeded" 514ms (17:02:05.342)]
Trace[1313047616]: [516.466701ms] [516.466701ms] END
I0406 17:02:05.834659       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0406 17:02:06.785798       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 17:02:06.795175       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 17:02:07.083734       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 17:02:07.272026       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 17:02:08.678738       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 17:02:08.823250       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 17:02:08.828294       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 17:02:08.835259       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0406 17:02:08.855334       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 17:02:09.474417       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0406 17:02:09.933433       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0406 17:02:11.317517       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0406 17:02:11.317655       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0406 17:02:14.332048       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0406 17:02:23.727783       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.98.30.41"}
W0406 17:02:23.766499       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.98.30.41:9443: connect: connection refused
E0406 17:02:23.766536       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.98.30.41:9443: connect: connection refused