I0501 02:35:49.651258       1 options.go:220] external host was not specified, using 199.19.213.130
I0501 02:35:49.660867       1 server.go:148] Version: v1.28.13
I0501 02:35:49.660941       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0501 02:35:49.911323       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0501 02:35:49.918936       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0501 02:35:49.918957       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0501 02:35:49.919208       1 instance.go:298] Using reconciler: lease
I0501 02:35:49.975090       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0501 02:35:49.975113       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0501 02:35:50.240441       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0501 02:35:50.240656       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0501 02:35:50.719186       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0501 02:35:50.733109       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0501 02:35:50.733137       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.733143       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.733668       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0501 02:35:50.733691       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0501 02:35:50.734597       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0501 02:35:50.735187       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0501 02:35:50.735199       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0501 02:35:50.735203       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0501 02:35:50.736328       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0501 02:35:50.736345       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0501 02:35:50.737147       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0501 02:35:50.737162       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.737165       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.737606       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0501 02:35:50.737619       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.737645       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0501 02:35:50.738119       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0501 02:35:50.739313       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0501 02:35:50.739328       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.739332       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.739756       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0501 02:35:50.739769       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.739772       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.740399       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0501 02:35:50.740412       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0501 02:35:50.741876       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0501 02:35:50.741890       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.741894       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.742338       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0501 02:35:50.742439       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.742449       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.744112       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0501 02:35:50.744125       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.744129       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.749294       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0501 02:35:50.753361       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0501 02:35:50.753380       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.753424       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.761107       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0501 02:35:50.761131       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0501 02:35:50.761136       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0501 02:35:50.762221       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0501 02:35:50.762234       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0501 02:35:50.762238       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0501 02:35:50.762932       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0501 02:35:50.762946       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0501 02:35:50.802371       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0501 02:35:50.802402       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0501 02:35:51.255826       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0501 02:35:51.255844       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0501 02:35:51.255947       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0501 02:35:51.256170       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0501 02:35:51.256143       1 secure_serving.go:213] Serving securely on [::]:6443
I0501 02:35:51.256401       1 controller.go:78] Starting OpenAPI AggregationController
I0501 02:35:51.256428       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0501 02:35:51.256657       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0501 02:35:51.256692       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0501 02:35:51.256718       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0501 02:35:51.256763       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0501 02:35:51.256789       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0501 02:35:51.256974       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0501 02:35:51.256988       1 controller.go:116] Starting legacy_token_tracking_controller
I0501 02:35:51.256999       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0501 02:35:51.257004       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0501 02:35:51.257054       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0501 02:35:51.257079       1 controller.go:134] Starting OpenAPI controller
I0501 02:35:51.257125       1 controller.go:85] Starting OpenAPI V3 controller
I0501 02:35:51.257134       1 aggregator.go:164] waiting for initial CRD sync...
I0501 02:35:51.257157       1 naming_controller.go:291] Starting NamingConditionController
I0501 02:35:51.257185       1 establishing_controller.go:76] Starting EstablishingController
I0501 02:35:51.257223       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0501 02:35:51.257250       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0501 02:35:51.257340       1 crd_finalizer.go:266] Starting CRDFinalizer
I0501 02:35:51.257393       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0501 02:35:51.257504       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0501 02:35:51.257992       1 available_controller.go:423] Starting AvailableConditionController
I0501 02:35:51.258011       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0501 02:35:51.256397       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0501 02:35:51.258050       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0501 02:35:51.258067       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0501 02:35:51.258489       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0501 02:35:51.259234       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0501 02:35:51.311763       1 shared_informer.go:318] Caches are synced for node_authorizer
E0501 02:35:51.333223       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0501 02:35:51.357220       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0501 02:35:51.357253       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0501 02:35:51.357570       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0501 02:35:51.357752       1 shared_informer.go:318] Caches are synced for configmaps
I0501 02:35:51.357875       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0501 02:35:51.358103       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0501 02:35:51.358096       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0501 02:35:51.358161       1 aggregator.go:166] initial CRD sync complete...
I0501 02:35:51.358170       1 autoregister_controller.go:141] Starting autoregister controller
I0501 02:35:51.358177       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0501 02:35:51.358186       1 cache.go:39] Caches are synced for autoregister controller
I0501 02:35:51.361017       1 controller.go:624] quota admission added evaluator for: namespaces
I0501 02:35:51.536378       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0501 02:35:52.265692       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0501 02:35:52.276908       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0501 02:35:52.276964       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0501 02:35:52.921282       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0501 02:35:52.976134       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0501 02:35:53.076138       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0501 02:35:53.090937       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.130]
I0501 02:35:53.092052       1 controller.go:624] quota admission added evaluator for: endpoints
I0501 02:35:53.098297       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0501 02:35:53.751406       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0501 02:35:54.940096       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0501 02:35:54.994365       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0501 02:35:55.191998       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0501 02:35:58.235758       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0501 02:35:58.998417       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0501 02:36:20.150504       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0501 02:36:20.226986       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0501 02:36:20.236656       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0501 02:36:20.273631       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0501 02:36:20.273680       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0501 02:36:20.295514       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0501 02:36:20.307800       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0501 02:36:20.321413       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0501 02:36:20.349154       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0501 02:36:20.349230       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0501 02:36:20.416828       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0501 02:36:20.416896       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0501 02:36:20.425548       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0501 02:36:20.425607       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0501 02:36:20.460809       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0501 02:36:20.585029       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0501 02:36:20.585085       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0501 02:36:20.613322       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:20.668011       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:20.710682       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:20.759308       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:20.770058       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:21.451078       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:21.456636       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:21.529910       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0501 02:36:26.757235       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0501 02:36:27.376360       1 trace.go:236] Trace[1746785363]: "Create" accept:application/json,audit-id:0154c419-28a3-4c84-a23f-d53b93e1a830,client:199.19.213.130,protocol:HTTP/2.0,resource:jobs,scope:resource,url:/apis/batch/v1/namespaces/envoy-gateway-system/jobs,user-agent:Helm/3.11.2,verb:POST (01-May-2026 02:36:26.754) (total time: 622ms):
Trace[1746785363]: ["Create etcd3" audit-id:0154c419-28a3-4c84-a23f-d53b93e1a830,key:/jobs/envoy-gateway-system/envoy-gateway-gateway-helm-certgen,type:*batch.Job,resource:jobs.batch 618ms (02:36:26.757)
Trace[1746785363]:  ---"Txn call succeeded" 618ms (02:36:27.375)]
Trace[1746785363]: [622.019426ms] [622.019426ms] END
I0501 02:36:29.684199       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0501 02:36:29.737347       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0501 02:36:29.745298       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0501 02:36:29.753164       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0501 02:36:29.762244       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0501 02:36:29.769728       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0501 02:36:29.786925       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0501 02:36:31.308181       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0501 02:36:31.940396       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0501 02:36:32.299368       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0501 02:36:32.708654       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0501 02:36:43.346000       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0501 02:36:43.346050       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0501 02:36:43.746733       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0501 02:36:51.340993       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.101.150.64"}
W0501 02:36:51.371121       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.101.150.64:9443: connect: connection refused
E0501 02:36:51.371154       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.101.150.64:9443: connect: connection refused
I0501 02:37:55.677461       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-provisioner-http-metrics" clusterIPs={"IPv4":"10.104.23.86"}
I0501 02:37:55.686873       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-nodeplugin-http-metrics" clusterIPs={"IPv4":"10.97.218.175"}