I0427 11:57:33.126885 1 options.go:220] external host was not specified, using 199.19.213.191 I0427 11:57:33.127885 1 server.go:148] Version: v1.28.13 I0427 11:57:33.127925 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0427 11:57:33.393074 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0427 11:57:33.404872 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0427 11:57:33.404894 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0427 11:57:33.405090 1 instance.go:298] Using reconciler: lease I0427 11:57:33.445128 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0427 11:57:33.445151 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0427 11:57:33.703054 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0427 11:57:33.703203 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0427 11:57:34.135097 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0427 11:57:34.156294 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0427 11:57:34.156427 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.156628 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.157198 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0427 11:57:34.157251 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0427 11:57:34.158230 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0427 11:57:34.159125 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0427 11:57:34.159177 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0427 11:57:34.159199 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0427 11:57:34.160751 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0427 11:57:34.160805 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0427 11:57:34.161781 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0427 11:57:34.161839 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.161862 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.162698 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0427 11:57:34.162764 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.162853 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0427 11:57:34.163923 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0427 11:57:34.165416 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0427 11:57:34.165457 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.165473 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.165870 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0427 11:57:34.165907 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.165921 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.166582 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0427 11:57:34.166617 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0427 11:57:34.168140 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0427 11:57:34.168184 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.168199 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.168604 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0427 11:57:34.168641 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.168656 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.170442 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0427 11:57:34.170486 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.170501 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.171781 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0427 11:57:34.172840 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0427 11:57:34.172879 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.172895 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.176100 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0427 11:57:34.176152 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0427 11:57:34.176167 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0427 11:57:34.176878 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0427 11:57:34.176918 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0427 11:57:34.176934 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0427 11:57:34.177359 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0427 11:57:34.177397 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0427 11:57:34.223530 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0427 11:57:34.223559 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0427 11:57:34.707503 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0427 11:57:34.707720 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0427 11:57:34.707846 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0427 11:57:34.707952 1 secure_serving.go:213] Serving securely on [::]:6443 I0427 11:57:34.708046 1 available_controller.go:423] Starting AvailableConditionController I0427 11:57:34.708071 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0427 11:57:34.708120 1 system_namespaces_controller.go:67] Starting system namespaces controller I0427 11:57:34.708157 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0427 11:57:34.708173 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0427 11:57:34.708192 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0427 11:57:34.708238 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0427 11:57:34.708288 1 aggregator.go:164] waiting for initial CRD sync... I0427 11:57:34.708631 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0427 11:57:34.708647 1 gc_controller.go:78] Starting apiserver lease garbage collector I0427 11:57:34.708732 1 controller.go:78] Starting OpenAPI AggregationController I0427 11:57:34.708836 1 controller.go:80] Starting OpenAPI V3 AggregationController I0427 11:57:34.709056 1 controller.go:116] Starting legacy_token_tracking_controller I0427 11:57:34.709087 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0427 11:57:34.709597 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0427 11:57:34.709627 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0427 11:57:34.712205 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0427 11:57:34.708243 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0427 11:57:34.728625 1 controller.go:134] Starting OpenAPI controller I0427 11:57:34.708647 1 gc_controller.go:78] Starting apiserver lease garbage collector I0427 11:57:34.728937 1 establishing_controller.go:76] Starting EstablishingController I0427 11:57:34.728952 1 controller.go:85] Starting OpenAPI V3 controller I0427 11:57:34.728960 1 naming_controller.go:291] Starting NamingConditionController I0427 11:57:34.728972 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0427 11:57:34.728987 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0427 11:57:34.731356 1 crd_finalizer.go:266] Starting CRDFinalizer I0427 11:57:34.749258 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0427 11:57:34.749276 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0427 11:57:34.749308 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0427 11:57:34.749386 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0427 11:57:34.794236 1 shared_informer.go:318] Caches are synced for node_authorizer I0427 11:57:34.809136 1 cache.go:39] Caches are synced for AvailableConditionController controller I0427 11:57:34.809246 1 shared_informer.go:318] Caches are synced for configmaps I0427 11:57:34.809336 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0427 11:57:34.809765 1 shared_informer.go:318] Caches are synced for crd-autoregister I0427 11:57:34.809806 1 aggregator.go:166] initial CRD sync complete... I0427 11:57:34.809817 1 autoregister_controller.go:141] Starting autoregister controller I0427 11:57:34.809822 1 cache.go:32] Waiting for caches to sync for autoregister controller I0427 11:57:34.809829 1 cache.go:39] Caches are synced for autoregister controller I0427 11:57:34.812236 1 controller.go:624] quota admission added evaluator for: namespaces I0427 11:57:34.821474 1 apf_controller.go:379] Running API Priority and Fairness config worker I0427 11:57:34.821543 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0427 11:57:34.833184 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0427 11:57:34.849318 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0427 11:57:35.716249 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0427 11:57:35.720484 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0427 11:57:35.720500 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0427 11:57:36.371601 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0427 11:57:36.413990 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0427 11:57:36.521171 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0427 11:57:36.528391 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.19.213.191] I0427 11:57:36.529654 1 controller.go:624] quota admission added evaluator for: endpoints I0427 11:57:36.534364 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0427 11:57:38.294863 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0427 11:57:38.301937 1 controller.go:624] quota admission added evaluator for: deployments.apps I0427 11:57:38.389206 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0427 11:57:38.576945 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0427 11:57:42.893537 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0427 11:57:43.492167 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0427 11:57:49.718240 1 trace.go:236] Trace[208144262]: "Update" accept:application/json, */*,audit-id:3b847e80-e86d-4cc4-a5df-d738b41363be,client:127.0.0.1,protocol:HTTP/2.0,resource:leases,scope:resource,url:/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/plndr-cp-lock,user-agent:kube-vip/v0.0.0 (linux/amd64) kubernetes/$Format,verb:PUT (27-Apr-2026 11:57:49.054) (total time: 663ms): Trace[208144262]: ["GuaranteedUpdate etcd3" audit-id:3b847e80-e86d-4cc4-a5df-d738b41363be,key:/leases/kube-system/plndr-cp-lock,type:*coordination.Lease,resource:leases.coordination.k8s.io 663ms (11:57:49.055) Trace[208144262]: ---"Txn call completed" 661ms (11:57:49.717)] Trace[208144262]: [663.301302ms] [663.301302ms] END I0427 11:58:03.965789 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0427 11:58:03.990576 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0427 11:58:04.010545 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 11:58:04.010581 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 11:58:04.075601 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0427 11:58:04.091348 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0427 11:58:04.131633 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0427 11:58:04.148701 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 11:58:04.148803 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0427 11:58:04.199582 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0427 11:58:04.199627 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0427 11:58:04.243818 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 11:58:04.243856 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 11:58:04.283662 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 11:58:04.301844 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 11:58:04.467469 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0427 11:58:04.467547 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0427 11:58:04.491674 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:04.549426 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:04.577030 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:04.626085 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:04.639178 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:05.188999 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:05.207838 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:05.279212 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0427 11:58:11.632115 1 controller.go:624] quota admission added evaluator for: jobs.batch I0427 11:58:12.106180 1 trace.go:236] Trace[502756259]: "Patch" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:65020934-a251-4621-b8e7-a8c0b079d34b,client:199.19.213.191,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/kube-system/pods/cilium-vfggc/status,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:PATCH (27-Apr-2026 11:58:11.579) (total time: 526ms): Trace[502756259]: ["GuaranteedUpdate etcd3" audit-id:65020934-a251-4621-b8e7-a8c0b079d34b,key:/pods/kube-system/cilium-vfggc,type:*core.Pod,resource:pods 526ms (11:58:11.579) Trace[502756259]: ---"Txn call completed" 514ms (11:58:12.104)] Trace[502756259]: ---"Object stored in database" 515ms (11:58:12.104) Trace[502756259]: [526.740849ms] [526.740849ms] END I0427 11:58:12.826247 1 trace.go:236] Trace[407684556]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:2cff26fc-6bff-4e4b-81be-3e1b798f77e2,client:199.19.213.191,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/pods,user-agent:kube-controller-manager/v1.28.13 (linux/amd64) kubernetes/024ab2a/system:serviceaccount:kube-system:job-controller,verb:POST (27-Apr-2026 11:58:12.143) (total time: 682ms): Trace[407684556]: [682.706357ms] [682.706357ms] END I0427 11:58:14.335398 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 11:58:14.368840 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 11:58:14.559734 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 11:58:14.702935 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 11:58:14.896392 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 11:58:15.082171 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 11:58:15.284201 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 11:58:15.481079 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0427 11:58:16.118542 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 11:58:17.691474 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0427 11:58:18.114782 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0427 11:58:22.505799 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0427 11:58:22.505849 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0427 11:58:22.974313 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0427 11:58:31.685851 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.108.199.191"} W0427 11:58:31.729199 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.108.199.191:9443: connect: connection refused E0427 11:58:31.729234 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.108.199.191:9443: connect: connection refused