I0702 10:06:59.127730       1 options.go:220] external host was not specified, using 199.19.213.24
I0702 10:06:59.128453       1 server.go:148] Version: v1.28.13
I0702 10:06:59.128493       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0702 10:06:59.452137       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0702 10:06:59.461880       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0702 10:06:59.461898       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0702 10:06:59.462114       1 instance.go:298] Using reconciler: lease
I0702 10:07:00.154763       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0702 10:07:00.154789       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0702 10:07:00.416201       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0702 10:07:00.416360       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0702 10:07:00.850283       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0702 10:07:00.869673       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0702 10:07:00.869701       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.869708       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.870287       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0702 10:07:00.870300       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0702 10:07:00.871114       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0702 10:07:00.871864       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0702 10:07:00.871877       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0702 10:07:00.871881       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0702 10:07:00.873723       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0702 10:07:00.873738       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0702 10:07:00.874879       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0702 10:07:00.874903       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.874908       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.875637       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0702 10:07:00.875652       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.875686       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0702 10:07:00.876272       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0702 10:07:00.878153       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0702 10:07:00.878167       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.878172       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.878605       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0702 10:07:00.878619       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.878623       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.879360       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0702 10:07:00.879394       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0702 10:07:00.881114       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0702 10:07:00.881130       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.881134       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.881688       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0702 10:07:00.881721       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.881786       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.883667       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0702 10:07:00.883683       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.883687       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.884845       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0702 10:07:00.886089       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0702 10:07:00.886105       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.886108       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.889214       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0702 10:07:00.889244       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0702 10:07:00.889248       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0702 10:07:00.890231       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0702 10:07:00.890248       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0702 10:07:00.890252       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0702 10:07:00.890721       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0702 10:07:00.890734       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0702 10:07:00.945944       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0702 10:07:00.945982       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0702 10:07:01.352299       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0702 10:07:01.352385       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0702 10:07:01.352587       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0702 10:07:01.352694       1 secure_serving.go:213] Serving securely on [::]:6443
I0702 10:07:01.352773       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0702 10:07:01.352801       1 available_controller.go:423] Starting AvailableConditionController
I0702 10:07:01.352810       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0702 10:07:01.352868       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0702 10:07:01.352890       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0702 10:07:01.352930       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0702 10:07:01.352772       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0702 10:07:01.352946       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0702 10:07:01.352797       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0702 10:07:01.353006       1 controller.go:134] Starting OpenAPI controller
I0702 10:07:01.353035       1 controller.go:85] Starting OpenAPI V3 controller
I0702 10:07:01.353061       1 naming_controller.go:291] Starting NamingConditionController
I0702 10:07:01.353083       1 establishing_controller.go:76] Starting EstablishingController
I0702 10:07:01.353103       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0702 10:07:01.353122       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0702 10:07:01.353142       1 crd_finalizer.go:266] Starting CRDFinalizer
I0702 10:07:01.353295       1 aggregator.go:164] waiting for initial CRD sync...
I0702 10:07:01.353503       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0702 10:07:01.353527       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0702 10:07:01.353544       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0702 10:07:01.353604       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0702 10:07:01.353632       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0702 10:07:01.353892       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0702 10:07:01.353503       1 controller.go:78] Starting OpenAPI AggregationController
I0702 10:07:01.353977       1 controller.go:116] Starting legacy_token_tracking_controller
I0702 10:07:01.354000       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0702 10:07:01.354055       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0702 10:07:01.354166       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0702 10:07:01.354687       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0702 10:07:01.362322       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0702 10:07:01.452405       1 shared_informer.go:318] Caches are synced for node_authorizer
I0702 10:07:01.453663       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0702 10:07:01.453692       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0702 10:07:01.453713       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0702 10:07:01.453732       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0702 10:07:01.453776       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0702 10:07:01.454038       1 shared_informer.go:318] Caches are synced for configmaps
I0702 10:07:01.454074       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0702 10:07:01.454189       1 aggregator.go:166] initial CRD sync complete...
I0702 10:07:01.454209       1 autoregister_controller.go:141] Starting autoregister controller
I0702 10:07:01.454219       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0702 10:07:01.454656       1 cache.go:39] Caches are synced for autoregister controller
I0702 10:07:01.463750       1 controller.go:624] quota admission added evaluator for: namespaces
E0702 10:07:01.815771       1 controller.go:145] while syncing ConfigMap "kube-system/kube-apiserver-legacy-service-account-token-tracking", err: namespaces "kube-system" not found
E0702 10:07:01.816516       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0702 10:07:02.069665       1 trace.go:236] Trace[269231989]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:8e4fe884-5cce-4d64-adf9-6b9ba1771455,client:::1,protocol:HTTP/2.0,resource:namespaces,scope:resource,url:/api/v1/namespaces,user-agent:kube-apiserver/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:POST (02-Jul-2026 10:07:01.463) (total time: 606ms):
Trace[269231989]: [606.445435ms] [606.445435ms] END
I0702 10:07:02.073384       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0702 10:07:02.360920       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0702 10:07:02.366208       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0702 10:07:02.366264       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0702 10:07:02.874925       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0702 10:07:02.913931       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0702 10:07:02.974530       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0702 10:07:02.981247       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.24]
I0702 10:07:02.982192       1 controller.go:624] quota admission added evaluator for: endpoints
I0702 10:07:02.986463       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0702 10:07:04.593103       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0702 10:07:04.772857       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0702 10:07:04.862062       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0702 10:07:05.065180       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0702 10:07:09.389360       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0702 10:07:09.637424       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0702 10:07:38.367231       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0702 10:07:38.411401       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 10:07:38.463435       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0702 10:07:38.488600       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0702 10:07:38.502686       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0702 10:07:38.517897       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 10:07:38.517937       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0702 10:07:38.537494       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0702 10:07:38.551536       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 10:07:38.554896       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 10:07:38.598111       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0702 10:07:38.598162       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0702 10:07:38.657543       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 10:07:38.657584       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 10:07:38.713697       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 10:07:38.775872       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:38.976614       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 10:07:38.976679       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 10:07:39.521889       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:39.568476       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:39.644746       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:39.651861       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:40.172454       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:40.191710       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:40.282645       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 10:07:45.226828       1 trace.go:236] Trace[507594612]: "Update" accept:application/json, */*,audit-id:693e7c40-6f66-4521-b6c4-52d7e058810c,client:199.19.213.24,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (02-Jul-2026 10:07:44.704) (total time: 522ms):
Trace[507594612]: ---"Conversion done" 17ms (10:07:44.726)
Trace[507594612]: ---"Writing http response done" 32ms (10:07:45.226)
Trace[507594612]: [522.55872ms] [522.55872ms] END
I0702 10:07:46.454735       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 10:07:46.459996       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 10:07:46.644701       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 10:07:46.843094       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 10:07:47.042784       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 10:07:47.463790       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 10:07:47.639623       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 10:07:47.886168       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 10:07:48.257409       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0702 10:07:49.062593       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 10:07:50.051914       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 10:07:50.465736       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0702 10:07:55.071421       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0702 10:07:55.071462       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0702 10:07:55.505266       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0702 10:08:05.151060       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.100.129.85"}
W0702 10:08:05.179417       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.100.129.85:9443: connect: connection refused
E0702 10:08:05.179443       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.100.129.85:9443: connect: connection refused
I0702 10:09:13.656546       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-nodeplugin-http-metrics" clusterIPs={"IPv4":"10.110.29.154"}
I0702 10:09:13.666538       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-provisioner-http-metrics" clusterIPs={"IPv4":"10.109.38.226"}