I0917 19:31:34.509177 1 options.go:220] external host was not specified, using 162.253.55.223 I0917 19:31:34.513000 1 server.go:148] Version: v1.28.13 I0917 19:31:34.513128 1 server.go:150] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" I0917 19:31:35.163440 1 shared_informer.go:311] Waiting for caches to sync for node_authorizer I0917 19:31:35.184015 1 plugins.go:158] Loaded 12 mutating admission controller(s) successfully in the following order: NamespaceLifecycle,LimitRanger,ServiceAccount,NodeRestriction,TaintNodesByCondition,Priority,DefaultTolerationSeconds,DefaultStorageClass,StorageObjectInUseProtection,RuntimeClass,DefaultIngressClass,MutatingAdmissionWebhook. I0917 19:31:35.184039 1 plugins.go:161] Loaded 13 validating admission controller(s) successfully in the following order: LimitRanger,ServiceAccount,PodSecurity,Priority,PersistentVolumeClaimResize,RuntimeClass,CertificateApproval,CertificateSigning,ClusterTrustBundleAttest,CertificateSubjectRestriction,ValidatingAdmissionPolicy,ValidatingAdmissionWebhook,ResourceQuota. I0917 19:31:35.184311 1 instance.go:298] Using reconciler: lease I0917 19:31:35.218961 1 handler.go:275] Adding GroupVersion apiextensions.k8s.io v1 to ResourceManager W0917 19:31:35.218979 1 genericapiserver.go:744] Skipping API apiextensions.k8s.io/v1beta1 because it has no resources. I0917 19:31:35.408143 1 handler.go:275] Adding GroupVersion v1 to ResourceManager I0917 19:31:35.408398 1 instance.go:709] API group "internal.apiserver.k8s.io" is not enabled, skipping. I0917 19:31:35.781890 1 instance.go:709] API group "resource.k8s.io" is not enabled, skipping. I0917 19:31:35.805654 1 handler.go:275] Adding GroupVersion authentication.k8s.io v1 to ResourceManager W0917 19:31:35.805688 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.805746 1 genericapiserver.go:744] Skipping API authentication.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.806247 1 handler.go:275] Adding GroupVersion authorization.k8s.io v1 to ResourceManager W0917 19:31:35.806271 1 genericapiserver.go:744] Skipping API authorization.k8s.io/v1beta1 because it has no resources. I0917 19:31:35.807570 1 handler.go:275] Adding GroupVersion autoscaling v2 to ResourceManager I0917 19:31:35.808588 1 handler.go:275] Adding GroupVersion autoscaling v1 to ResourceManager W0917 19:31:35.808606 1 genericapiserver.go:744] Skipping API autoscaling/v2beta1 because it has no resources. W0917 19:31:35.808611 1 genericapiserver.go:744] Skipping API autoscaling/v2beta2 because it has no resources. I0917 19:31:35.810430 1 handler.go:275] Adding GroupVersion batch v1 to ResourceManager W0917 19:31:35.810451 1 genericapiserver.go:744] Skipping API batch/v1beta1 because it has no resources. I0917 19:31:35.811690 1 handler.go:275] Adding GroupVersion certificates.k8s.io v1 to ResourceManager W0917 19:31:35.811711 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.811719 1 genericapiserver.go:744] Skipping API certificates.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.812491 1 handler.go:275] Adding GroupVersion coordination.k8s.io v1 to ResourceManager W0917 19:31:35.812517 1 genericapiserver.go:744] Skipping API coordination.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.812566 1 genericapiserver.go:744] Skipping API discovery.k8s.io/v1beta1 because it has no resources. I0917 19:31:35.813324 1 handler.go:275] Adding GroupVersion discovery.k8s.io v1 to ResourceManager I0917 19:31:35.815494 1 handler.go:275] Adding GroupVersion networking.k8s.io v1 to ResourceManager W0917 19:31:35.815515 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.815521 1 genericapiserver.go:744] Skipping API networking.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.816010 1 handler.go:275] Adding GroupVersion node.k8s.io v1 to ResourceManager W0917 19:31:35.816027 1 genericapiserver.go:744] Skipping API node.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.816032 1 genericapiserver.go:744] Skipping API node.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.817015 1 handler.go:275] Adding GroupVersion policy v1 to ResourceManager W0917 19:31:35.817036 1 genericapiserver.go:744] Skipping API policy/v1beta1 because it has no resources. I0917 19:31:35.819404 1 handler.go:275] Adding GroupVersion rbac.authorization.k8s.io v1 to ResourceManager W0917 19:31:35.819426 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.819433 1 genericapiserver.go:744] Skipping API rbac.authorization.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.819972 1 handler.go:275] Adding GroupVersion scheduling.k8s.io v1 to ResourceManager W0917 19:31:35.819994 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.820001 1 genericapiserver.go:744] Skipping API scheduling.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.822808 1 handler.go:275] Adding GroupVersion storage.k8s.io v1 to ResourceManager W0917 19:31:35.822826 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.822831 1 genericapiserver.go:744] Skipping API storage.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.824174 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta3 to ResourceManager I0917 19:31:35.825678 1 handler.go:275] Adding GroupVersion flowcontrol.apiserver.k8s.io v1beta2 to ResourceManager W0917 19:31:35.825698 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.825705 1 genericapiserver.go:744] Skipping API flowcontrol.apiserver.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.830425 1 handler.go:275] Adding GroupVersion apps v1 to ResourceManager W0917 19:31:35.830443 1 genericapiserver.go:744] Skipping API apps/v1beta2 because it has no resources. W0917 19:31:35.830449 1 genericapiserver.go:744] Skipping API apps/v1beta1 because it has no resources. I0917 19:31:35.831348 1 handler.go:275] Adding GroupVersion admissionregistration.k8s.io v1 to ResourceManager W0917 19:31:35.831362 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1beta1 because it has no resources. W0917 19:31:35.831367 1 genericapiserver.go:744] Skipping API admissionregistration.k8s.io/v1alpha1 because it has no resources. I0917 19:31:35.832062 1 handler.go:275] Adding GroupVersion events.k8s.io v1 to ResourceManager W0917 19:31:35.832081 1 genericapiserver.go:744] Skipping API events.k8s.io/v1beta1 because it has no resources. I0917 19:31:35.858145 1 handler.go:275] Adding GroupVersion apiregistration.k8s.io v1 to ResourceManager W0917 19:31:35.858172 1 genericapiserver.go:744] Skipping API apiregistration.k8s.io/v1beta1 because it has no resources. I0917 19:31:36.294197 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0917 19:31:36.294240 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0917 19:31:36.294544 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/etc/kubernetes/pki/apiserver.crt::/etc/kubernetes/pki/apiserver.key" I0917 19:31:36.294866 1 secure_serving.go:213] Serving securely on [::]:6443 I0917 19:31:36.294962 1 apiservice_controller.go:97] Starting APIServiceRegistrationController I0917 19:31:36.294979 1 cache.go:32] Waiting for caches to sync for APIServiceRegistrationController controller I0917 19:31:36.295050 1 available_controller.go:423] Starting AvailableConditionController I0917 19:31:36.295066 1 cache.go:32] Waiting for caches to sync for AvailableConditionController controller I0917 19:31:36.295471 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0917 19:31:36.295505 1 controller.go:116] Starting legacy_token_tracking_controller I0917 19:31:36.295519 1 shared_informer.go:311] Waiting for caches to sync for configmaps I0917 19:31:36.295619 1 aggregator.go:164] waiting for initial CRD sync... I0917 19:31:36.295905 1 cluster_authentication_trust_controller.go:440] Starting cluster_authentication_trust_controller controller I0917 19:31:36.295921 1 shared_informer.go:311] Waiting for caches to sync for cluster_authentication_trust_controller I0917 19:31:36.295956 1 dynamic_serving_content.go:132] "Starting controller" name="aggregator-proxy-cert::/etc/kubernetes/pki/front-proxy-client.crt::/etc/kubernetes/pki/front-proxy-client.key" I0917 19:31:36.296079 1 gc_controller.go:78] Starting apiserver lease garbage collector I0917 19:31:36.296173 1 controller.go:78] Starting OpenAPI AggregationController I0917 19:31:36.296327 1 handler_discovery.go:412] Starting ResourceDiscoveryManager I0917 19:31:36.296553 1 customresource_discovery_controller.go:289] Starting DiscoveryController I0917 19:31:36.296634 1 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" I0917 19:31:36.296725 1 dynamic_cafile_content.go:157] "Starting controller" name="request-header::/etc/kubernetes/pki/front-proxy-ca.crt" I0917 19:31:36.297205 1 apf_controller.go:374] Starting API Priority and Fairness config controller I0917 19:31:36.297285 1 system_namespaces_controller.go:67] Starting system namespaces controller I0917 19:31:36.297358 1 controller.go:80] Starting OpenAPI V3 AggregationController I0917 19:31:36.297620 1 gc_controller.go:78] Starting apiserver lease garbage collector I0917 19:31:36.297743 1 controller.go:134] Starting OpenAPI controller I0917 19:31:36.297808 1 controller.go:85] Starting OpenAPI V3 controller I0917 19:31:36.297860 1 naming_controller.go:291] Starting NamingConditionController I0917 19:31:36.297905 1 establishing_controller.go:76] Starting EstablishingController I0917 19:31:36.297921 1 nonstructuralschema_controller.go:192] Starting NonStructuralSchemaConditionController I0917 19:31:36.297940 1 apiapproval_controller.go:186] Starting KubernetesAPIApprovalPolicyConformantConditionController I0917 19:31:36.297958 1 crd_finalizer.go:266] Starting CRDFinalizer I0917 19:31:36.296575 1 crdregistration_controller.go:111] Starting crd-autoregister controller I0917 19:31:36.297974 1 shared_informer.go:311] Waiting for caches to sync for crd-autoregister I0917 19:31:36.363844 1 shared_informer.go:318] Caches are synced for node_authorizer E0917 19:31:36.375268 1 controller.go:146] "Failed to ensure lease exists, will retry" err="namespaces \"kube-system\" not found" interval="200ms" I0917 19:31:36.395332 1 cache.go:39] Caches are synced for AvailableConditionController controller I0917 19:31:36.395356 1 cache.go:39] Caches are synced for APIServiceRegistrationController controller I0917 19:31:36.395631 1 shared_informer.go:318] Caches are synced for configmaps I0917 19:31:36.395980 1 shared_informer.go:318] Caches are synced for cluster_authentication_trust_controller I0917 19:31:36.397314 1 apf_controller.go:379] Running API Priority and Fairness config worker I0917 19:31:36.397340 1 apf_controller.go:382] Running API Priority and Fairness periodic rebalancing process I0917 19:31:36.397997 1 shared_informer.go:318] Caches are synced for crd-autoregister I0917 19:31:36.398036 1 aggregator.go:166] initial CRD sync complete... I0917 19:31:36.398044 1 autoregister_controller.go:141] Starting autoregister controller I0917 19:31:36.398050 1 cache.go:32] Waiting for caches to sync for autoregister controller I0917 19:31:36.398055 1 cache.go:39] Caches are synced for autoregister controller I0917 19:31:36.398662 1 controller.go:624] quota admission added evaluator for: namespaces I0917 19:31:36.599363 1 controller.go:624] quota admission added evaluator for: leases.coordination.k8s.io I0917 19:31:37.309720 1 storage_scheduling.go:95] created PriorityClass system-node-critical with value 2000001000 I0917 19:31:37.341095 1 storage_scheduling.go:95] created PriorityClass system-cluster-critical with value 2000000000 I0917 19:31:37.341113 1 storage_scheduling.go:111] all system priority classes are created successfully or already exist. I0917 19:31:38.312081 1 controller.go:624] quota admission added evaluator for: roles.rbac.authorization.k8s.io I0917 19:31:38.441178 1 controller.go:624] quota admission added evaluator for: rolebindings.rbac.authorization.k8s.io I0917 19:31:38.622357 1 alloc.go:330] "allocated clusterIPs" service="default/kubernetes" clusterIPs={"IPv4":"10.96.0.1"} W0917 19:31:38.634427 1 lease.go:263] Resetting endpoints for master service "kubernetes" to [162.253.55.223] I0917 19:31:38.636018 1 controller.go:624] quota admission added evaluator for: endpoints I0917 19:31:38.645066 1 controller.go:624] quota admission added evaluator for: endpointslices.discovery.k8s.io I0917 19:31:39.748392 1 trace.go:236] Trace[927487646]: "Create" accept:application/vnd.kubernetes.protobuf,application/json,audit-id:c768b049-b7ff-4eaf-b90a-b7e4dc182107,client:162.253.55.223,protocol:HTTP/2.0,resource:events,scope:resource,url:/api/v1/namespaces/default/events,user-agent:kubelet/v1.28.13 (linux/amd64) kubernetes/024ab2a,verb:POST (17-Sep-2026 19:31:39.235) (total time: 512ms): Trace[927487646]: ["Create etcd3" audit-id:c768b049-b7ff-4eaf-b90a-b7e4dc182107,key:/events/default/instance.18d6328f5cc3ae35,type:*core.Event,resource:events 511ms (19:31:39.236) Trace[927487646]: ---"TransformToStorage succeeded" 328ms (19:31:39.564) Trace[927487646]: ---"Txn call succeeded" 182ms (19:31:39.747)] Trace[927487646]: [512.714252ms] [512.714252ms] END I0917 19:31:39.787764 1 controller.go:624] quota admission added evaluator for: serviceaccounts I0917 19:31:41.263076 1 controller.go:624] quota admission added evaluator for: deployments.apps I0917 19:31:41.281039 1 alloc.go:330] "allocated clusterIPs" service="kube-system/kube-dns" clusterIPs={"IPv4":"10.96.0.10"} I0917 19:31:41.481768 1 controller.go:624] quota admission added evaluator for: daemonsets.apps I0917 19:31:44.158691 1 controller.go:624] quota admission added evaluator for: controllerrevisions.apps I0917 19:31:44.861032 1 controller.go:624] quota admission added evaluator for: replicasets.apps I0917 19:32:15.043160 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0917 19:32:15.210778 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0917 19:32:15.238972 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0917 19:32:15.239021 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0917 19:32:15.253210 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0917 19:32:15.288109 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0917 19:32:15.309028 1 handler.go:275] Adding GroupVersion gateway.networking.x-k8s.io v1alpha1 to ResourceManager I0917 19:32:15.321471 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0917 19:32:15.341562 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0917 19:32:15.341607 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0917 19:32:15.388309 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha2 to ResourceManager I0917 19:32:15.388417 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1alpha3 to ResourceManager I0917 19:32:15.422546 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0917 19:32:15.422595 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0917 19:32:15.458304 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0917 19:32:15.576821 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1 to ResourceManager I0917 19:32:15.576866 1 handler.go:275] Adding GroupVersion gateway.networking.k8s.io v1beta1 to ResourceManager I0917 19:32:15.589332 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:15.623488 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:15.662454 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:15.693955 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:15.707788 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:16.268387 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:16.349851 1 handler.go:275] Adding GroupVersion gateway.envoyproxy.io v1alpha1 to ResourceManager I0917 19:32:21.374018 1 controller.go:624] quota admission added evaluator for: jobs.batch I0917 19:32:22.236640 1 trace.go:236] Trace[974894472]: "Create" accept:application/vnd.kubernetes.protobuf, */*,audit-id:4ba5f79c-8b14-4477-bcba-c687cfd82250,client:162.253.55.223,protocol:HTTP/2.0,resource:pods,scope:resource,url:/api/v1/namespaces/envoy-gateway-system/pods,user-agent:kube-controller-manager/v1.28.13 (linux/amd64) kubernetes/024ab2a/system:serviceaccount:kube-system:job-controller,verb:POST (17-Sep-2026 19:32:21.594) (total time: 641ms): Trace[974894472]: ["Create etcd3" audit-id:4ba5f79c-8b14-4477-bcba-c687cfd82250,key:/pods/envoy-gateway-system/envoy-gateway-gateway-helm-certgen-crmsn,type:*core.Pod,resource:pods 636ms (19:32:21.599) Trace[974894472]: ---"Txn call succeeded" 636ms (19:32:22.236)] Trace[974894472]: [641.677263ms] [641.677263ms] END I0917 19:32:23.490903 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0917 19:32:23.502576 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0917 19:32:23.510119 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0917 19:32:23.752859 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0917 19:32:23.887094 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0917 19:32:24.302771 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0917 19:32:24.504478 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0917 19:32:25.877667 1 handler.go:275] Adding GroupVersion cilium.io v2alpha1 to ResourceManager I0917 19:32:26.528010 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0917 19:32:27.142932 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager I0917 19:32:27.565389 1 handler.go:275] Adding GroupVersion cilium.io v2 to ResourceManager W0917 19:32:28.330843 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found E0917 19:32:28.330888 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": service "envoy-gateway" not found I0917 19:32:31.286233 1 controller.go:624] quota admission added evaluator for: ciliumendpoints.cilium.io I0917 19:32:41.678168 1 alloc.go:330] "allocated clusterIPs" service="envoy-gateway-system/envoy-gateway" clusterIPs={"IPv4":"10.101.185.13"} W0917 19:32:41.720072 1 dispatcher.go:210] Failed calling webhook, failing open topology.webhook.gateway.envoyproxy.io: failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.101.185.13:9443: connect: connection refused E0917 19:32:41.720161 1 dispatcher.go:214] failed calling webhook "topology.webhook.gateway.envoyproxy.io": failed to call webhook: Post "https://envoy-gateway.envoy-gateway-system.svc:9443/inject-pod-topology?timeout=10s": dial tcp 10.101.185.13:9443: connect: connection refused