I0702 05:09:40.464839       1 options.go:220] external host was not specified, using 199.204.45.129
I0702 05:09:40.465609       1 server.go:148] Version: v1.28.13
I0702 05:09:40.465649       1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK=""
I0702 05:09:40.782166       1 shared_informer.go:311] Waiting for caches to sync for node_authorizer
I0702 05:09:40.800075       1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook.
I0702 05:09:40.800099       1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota.
I0702 05:09:40.800471       1 instance.go:298] Using reconciler: lease
I0702 05:09:40.996615       1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager
W0702 05:09:40.996652       1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources.
I0702 05:09:41.279788       1 handler.go:275] Adding GroupVersion  v1 to ResourceManager
I0702 05:09:41.279940       1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping.
I0702 05:09:41.730589       1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping.
I0702 05:09:41.746731       1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager
W0702 05:09:41.746755       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.746761       1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.747487       1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager
W0702 05:09:41.747497       1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources.
I0702 05:09:41.749075       1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager
I0702 05:09:41.750659       1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager
W0702 05:09:41.750686       1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources.
W0702 05:09:41.750696       1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources.
I0702 05:09:41.753545       1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager
W0702 05:09:41.753560       1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources.
I0702 05:09:41.754242       1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager
W0702 05:09:41.754254       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.754257       1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.754688       1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager
W0702 05:09:41.754699       1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.754726       1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources.
I0702 05:09:41.755134       1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager
I0702 05:09:41.756502       1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager
W0702 05:09:41.756515       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.756518       1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.756891       1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager
W0702 05:09:41.756903       1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.756906       1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.757600       1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager
W0702 05:09:41.757612       1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources.
I0702 05:09:41.759030       1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager
W0702 05:09:41.759043       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.759048       1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.759395       1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager
W0702 05:09:41.759407       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.759410       1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.761242       1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager
W0702 05:09:41.761255       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.761259       1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.762240       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager
I0702 05:09:41.763245       1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager
W0702 05:09:41.763259       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.763262       1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.766389       1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager
W0702 05:09:41.766404       1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources.
W0702 05:09:41.766408       1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources.
I0702 05:09:41.767099       1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager
W0702 05:09:41.767111       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources.
W0702 05:09:41.767115       1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources.
I0702 05:09:41.767494       1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager
W0702 05:09:41.767505       1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources.
I0702 05:09:41.805952       1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager
W0702 05:09:41.805990       1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources.
I0702 05:09:42.237343       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0702 05:09:42.237374       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0702 05:09:42.237685       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key"
I0702 05:09:42.238098       1 secure_serving.go:213] Serving securely on [::]:6443
I0702 05:09:42.238185       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0702 05:09:42.238298       1 apf_controller.go:374] Starting API Priority and Fairness config controller
I0702 05:09:42.238366       1 system_namespaces_controller.go:67] Starting system namespaces controller
I0702 05:09:42.238383       1 aggregator.go:164] waiting for initial CRD sync...
I0702 05:09:42.238451       1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key"
I0702 05:09:42.238473       1 controller.go:78] Starting OpenAPI AggregationController
I0702 05:09:42.238616       1 apiservice_controller.go:97] Starting APIServiceRegistrationController
I0702 05:09:42.238628       1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller
I0702 05:09:42.238679       1 crdregistration_controller.go:111] Starting crd-autoregister controller
I0702 05:09:42.238689       1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister
I0702 05:09:42.238716       1 customresource_discovery_controller.go:289] Starting DiscoveryController
I0702 05:09:42.238959       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0702 05:09:42.239223       1 controller.go:134] Starting OpenAPI controller
I0702 05:09:42.239280       1 controller.go:85] Starting OpenAPI V3 controller
I0702 05:09:42.239361       1 naming_controller.go:291] Starting NamingConditionController
I0702 05:09:42.239399       1 establishing_controller.go:76] Starting EstablishingController
I0702 05:09:42.239436       1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController
I0702 05:09:42.239473       1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController
I0702 05:09:42.239504       1 crd_finalizer.go:266] Starting CRDFinalizer
I0702 05:09:42.240060       1 available_controller.go:423] Starting AvailableConditionController
I0702 05:09:42.240087       1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller
I0702 05:09:42.240273       1 handler_discovery.go:412] Starting ResourceDiscoveryManager
I0702 05:09:42.240410       1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller
I0702 05:09:42.240434       1 controller.go:80] Starting OpenAPI V3 AggregationController
I0702 05:09:42.240443       1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller
I0702 05:09:42.240967       1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt"
I0702 05:09:42.241040       1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt"
I0702 05:09:42.240412       1 gc_controller.go:78] Starting apiserver lease garbage collector
I0702 05:09:42.241070       1 controller.go:116] Starting legacy_token_tracking_controller
I0702 05:09:42.241087       1 shared_informer.go:311] Waiting for caches to sync for configmaps
I0702 05:09:42.282612       1 shared_informer.go:318] Caches are synced for node_authorizer
E0702 05:09:42.316954       1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms"
I0702 05:09:42.338466       1 apf_controller.go:379] Running API Priority and Fairness config worker
I0702 05:09:42.338496       1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process
I0702 05:09:42.338783       1 shared_informer.go:318] Caches are synced for crd-autoregister
I0702 05:09:42.338814       1 cache.go:39] Caches are synced for APIServiceRegistrationController controller
I0702 05:09:42.338837       1 aggregator.go:166] initial CRD sync complete...
I0702 05:09:42.338854       1 autoregister_controller.go:141] Starting autoregister controller
I0702 05:09:42.338869       1 cache.go:32] Waiting for caches to sync for autoregister controller
I0702 05:09:42.338879       1 cache.go:39] Caches are synced for autoregister controller
I0702 05:09:42.340067       1 controller.go:624] quota admission added evaluator for: namespaces
I0702 05:09:42.340363       1 cache.go:39] Caches are synced for AvailableConditionController controller
I0702 05:09:42.340577       1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller
I0702 05:09:42.341497       1 shared_informer.go:318] Caches are synced for configmaps
I0702 05:09:42.521438       1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io
I0702 05:09:43.251858       1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000
I0702 05:09:43.256688       1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000
I0702 05:09:43.256706       1 storage_scheduling.go:111] all system priority classes are created successfully or already exist.
I0702 05:09:43.876300       1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io
I0702 05:09:43.923672       1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io
I0702 05:09:44.110445       1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"}
W0702 05:09:44.120074       1 lease.go:263] Resetting endpoints for master service "kubernetes" to [199.204.45.129]
I0702 05:09:44.121370       1 controller.go:624] quota admission added evaluator for: endpoints
I0702 05:09:44.128796       1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io
I0702 05:09:44.742537       1 controller.go:624] quota admission added evaluator for: serviceaccounts
I0702 05:09:45.844181       1 controller.go:624] quota admission added evaluator for: deployments.apps
I0702 05:09:45.897691       1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"}
I0702 05:09:46.098191       1 controller.go:624] quota admission added evaluator for: daemonsets.apps
I0702 05:09:49.737552       1 controller.go:624] quota admission added evaluator for: replicasets.apps
I0702 05:09:49.988428       1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps
I0702 05:10:17.661920       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0702 05:10:17.675982       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 05:10:17.697299       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0702 05:10:17.723834       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0702 05:10:17.739003       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 05:10:17.739042       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0702 05:10:17.751270       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 05:10:17.751312       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 05:10:17.762012       1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager
I0702 05:10:17.777339       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0702 05:10:17.818643       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager
I0702 05:10:17.818937       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager
I0702 05:10:17.895994       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 05:10:17.896099       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 05:10:17.907641       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 05:10:18.021795       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:18.115484       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:18.269433       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager
I0702 05:10:18.269497       1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager
I0702 05:10:18.322351       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:18.349608       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:18.359768       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:18.878666       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:18.889307       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:19.121357       1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager
I0702 05:10:24.320831       1 trace.go:236] Trace[1909961490]: "Update" accept:application/json, */*,audit-id:62463ea9-9496-4ec1-8367-fea4c4d2ae06,client:199.204.45.129,protocol:HTTP/2.0,resource:secrets,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/secrets/sh.helm.release.v1.envoy-gateway.v1,user-agent:Helm/3.11.2,verb:PUT (02-Jul-2026 05:10:23.543) (total time: 776ms):
Trace[1909961490]: ---"Conversion done" 21ms (05:10:23.571)
Trace[1909961490]: ["GuaranteedUpdate etcd3" audit-id:62463ea9-9496-4ec1-8367-fea4c4d2ae06,key:/secrets/envoy-gateway-system/sh.helm.release.v1.envoy-gateway.v1,type:*core.Secret,resource:secrets 748ms (05:10:23.572)
Trace[1909961490]:  ---"Txn call completed" 706ms (05:10:24.288)]
Trace[1909961490]: ---"Writing http response done" 31ms (05:10:24.320)
Trace[1909961490]: [776.901755ms] [776.901755ms] END
I0702 05:10:25.514716       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 05:10:25.522358       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 05:10:25.527896       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 05:10:25.533262       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 05:10:26.306233       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 05:10:26.515410       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 05:10:27.136530       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 05:10:27.177756       1 controller.go:624] quota admission added evaluator for: jobs.batch
I0702 05:10:27.341914       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 05:10:28.312305       1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager
I0702 05:10:28.721225       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
I0702 05:10:29.084879       1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager
W0702 05:10:34.323382       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
E0702 05:10:34.323418       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found
I0702 05:10:34.731320       1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io
I0702 05:10:43.233126       1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.100.107.99"}
W0702 05:10:43.264354       1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.100.107.99:9443: connect: connection refused
E0702 05:10:43.264389       1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.100.107.99:9443: connect: connection refused
I0702 05:11:50.035423       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-provisioner-http-metrics" clusterIPs={"IPv4":"10.102.19.136"}
I0702 05:11:50.040709       1 alloc.go:330] "allocated clusterIPs" service="kube-system/ceph-csi-rbd-nodeplugin-http-metrics" clusterIPs={"IPv4":"10.102.157.177"}