++ K8S_NODE=
++ [[ -n '' ]]
++ northd_pidfile=/var/run/ovn/ovn-northd.pid
++ controller_pidfile=/var/run/ovn/ovn-controller.pid
++ controller_logfile=/var/log/ovn/acl-audit-log.log
++ vswitch_dbsock=/var/run/openvswitch/db.sock
++ nbdb_pidfile=/var/run/ovn/ovnnb_db.pid
++ nbdb_sock=/var/run/ovn/ovnnb_db.sock
++ nbdb_ctl=/var/run/ovn/ovnnb_db.ctl
++ sbdb_pidfile=/var/run/ovn/ovnsb_db.pid
++ sbdb_sock=/var/run/ovn/ovnsb_db.sock
++ sbdb_ctl=/var/run/ovn/ovnsb_db.ctl
+ start-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt
+ local detail=ovn-metrics
+ local listen_port=9105
+ local upstream_port=29105
+ local privkey=/etc/pki/tls/metrics-cert/tls.key
+ local clientcert=/etc/pki/tls/metrics-cert/tls.crt
+ [[ 5 -ne 5 ]]
++ date -Iseconds
+ echo '2026-10-05T01:39:38+00:00 INFO: waiting for ovn-metrics certs to be mounted'
2026-10-05T01:39:38+00:00 INFO: waiting for ovn-metrics certs to be mounted
+ wait-for-certs ovn-metrics /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt
+ local detail=ovn-metrics
+ local privkey=/etc/pki/tls/metrics-cert/tls.key
+ local clientcert=/etc/pki/tls/metrics-cert/tls.crt
+ [[ 3 -ne 3 ]]
+ retries=0
++ date +%s
+ TS=1791164378
+ WARN_TS=1791165578
+ HAS_LOGGED_INFO=0
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164378
+ [[ 1791164378 -gt WARN_TS ]]
+ [[ 0 -eq 0 ]]
++ date -Iseconds
+ echo '2026-10-05T01:39:38+00:00 INFO: ovn-metrics certs not mounted. Waiting one hour.'
2026-10-05T01:39:38+00:00 INFO: ovn-metrics certs not mounted. Waiting one hour.
+ HAS_LOGGED_INFO=1
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164383
+ [[ 1791164383 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164388
+ [[ 1791164388 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164393
+ [[ 1791164393 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164398
+ [[ 1791164398 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164403
+ [[ 1791164403 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164408
+ [[ 1791164408 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164413
+ [[ 1791164413 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164418
+ [[ 1791164418 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164423
+ [[ 1791164423 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164428
+ [[ 1791164428 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164433
+ [[ 1791164433 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164438
+ [[ 1791164438 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164443
+ [[ 1791164443 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164448
+ [[ 1791164448 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164453
+ [[ 1791164453 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164458
+ [[ 1791164458 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164463
+ [[ 1791164463 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164468
+ [[ 1791164468 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164473
+ [[ 1791164473 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164478
+ [[ 1791164478 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164483
+ [[ 1791164483 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164488
+ [[ 1791164488 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164493
+ [[ 1791164493 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164498
+ [[ 1791164498 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164503
+ [[ 1791164503 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164508
+ [[ 1791164508 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164513
+ [[ 1791164513 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164518
+ [[ 1791164518 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164523
+ [[ 1791164523 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164528
+ [[ 1791164528 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164533
+ [[ 1791164533 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164538
+ [[ 1791164538 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164543
+ [[ 1791164543 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164548
+ [[ 1791164548 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164553
+ [[ 1791164553 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164558
+ [[ 1791164558 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164563
+ [[ 1791164563 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164568
+ [[ 1791164568 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164573
+ [[ 1791164573 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164578
+ [[ 1791164578 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164583
+ [[ 1791164583 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164588
+ [[ 1791164588 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164593
+ [[ 1791164593 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164598
+ [[ 1791164598 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
++ date +%s
+ CUR_TS=1791164603
+ [[ 1791164603 -gt WARN_TS ]]
+ [[ 1 -eq 0 ]]
+ sleep 5
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]]
+ [[ ! -f /etc/pki/tls/metrics-cert/tls.crt ]]
++ date -Iseconds
2026-10-05T01:43:28+00:00 INFO: ovn-metrics certs mounted, starting kube-rbac-proxy
+ echo '2026-10-05T01:43:28+00:00 INFO: ovn-metrics certs mounted, starting kube-rbac-proxy'
+ exec /usr/bin/kube-rbac-proxy --logtostderr --secure-listen-address=:9105 --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 --upstream=http://127.0.0.1:29105/ --tls-private-key-file=/etc/pki/tls/metrics-cert/tls.key --tls-cert-file=/etc/pki/tls/metrics-cert/tls.crt
W1005 01:43:28.796180    3570 deprecated.go:66] 
==== Removed Flag Warning ======================

logtostderr is removed in the k8s upstream and has no effect any more.

===============================================
		
I1005 01:43:28.796580    3570 kube-rbac-proxy.go:235] Valid token audiences: 
I1005 01:43:28.797485    3570 kube-rbac-proxy.go:349] Reading certificate files
I1005 01:43:28.797661    3570 kube-rbac-proxy.go:397] Starting TCP socket on :9105
I1005 01:43:28.797825    3570 kube-rbac-proxy.go:404] Listening securely on :9105