2026-11-02T16:28:20.676708Z info FLAG: --concurrency="0" 2026-11-02T16:28:20.676846Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-11-02T16:28:20.676870Z info FLAG: --help="false" 2026-11-02T16:28:20.676887Z info FLAG: --log_as_json="false" 2026-11-02T16:28:20.676902Z info FLAG: --log_caller="" 2026-11-02T16:28:20.676917Z info FLAG: --log_output_level="default:info" 2026-11-02T16:28:20.676933Z info FLAG: --log_stacktrace_level="default:none" 2026-11-02T16:28:20.676952Z info FLAG: --log_target="[stdout]" 2026-11-02T16:28:20.676968Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-11-02T16:28:20.676983Z info FLAG: --outlierLogPath="" 2026-11-02T16:28:20.676998Z info FLAG: --profiling="true" 2026-11-02T16:28:20.677029Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-11-02T16:28:20.677050Z info FLAG: --proxyLogLevel="warning" 2026-11-02T16:28:20.677066Z info FLAG: --serviceCluster="istio-proxy" 2026-11-02T16:28:20.677087Z info FLAG: --stsPort="0" 2026-11-02T16:28:20.677107Z info FLAG: --templateFile="" 2026-11-02T16:28:20.677124Z info FLAG: --tokenManagerPlugin="" 2026-11-02T16:28:20.677147Z info FLAG: --vklog="0" 2026-11-02T16:28:20.677163Z info Version 1.28.10-cebc47d567fd1333707199224c18129ecfe07c05-Clean 2026-11-02T16:28:20.677303Z info Proxy role ips=[10.133.0.17] type=router id=maas-default-gateway-openshift-default-64d4cc998c-rmvmh.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-11-02T16:28:20.677378Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-11-02T16:28:20.678573Z info cpu limit detected as 2, setting concurrency 2026-11-02T16:28:20.678827Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-11-02T16:28:20.678876Z info JWT policy is third-party-jwt 2026-11-02T16:28:20.678895Z info using credential fetcher of JWT type in cluster.local trust domain 2026-11-02T16:28:20.681481Z info Starting default Istio SDS Server 2026-11-02T16:28:20.681555Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-11-02T16:28:20.681603Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-11-02T16:28:20.681592Z info Opening status port 15020 2026-11-02T16:28:20.682787Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-11-02T16:28:20.685196Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-11-02T16:28:20.686404Z info Starting proxy agent 2026-11-02T16:28:20.686479Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-11-02T16:28:20.698894Z info sds Starting SDS grpc server 2026-11-02T16:28:20.698924Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-11-02T16:28:20.772210Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-11-02T16:28:20.890896Z info cache generated new workload certificate resourceName=default latency=206.304412ms ttl=23h59m59.109107756s 2026-11-02T16:28:20.890990Z info cache Root cert has changed, start rotating root cert 2026-11-02T16:28:20.891068Z info cache returned workload trust anchor from cache ttl=23h59m59.108933716s 2026-11-02T16:28:20.895027Z info ads ADS: new connection for node:1 2026-11-02T16:28:20.895148Z info cache returned workload certificate from cache ttl=23h59m59.104855301s 2026-11-02T16:28:20.895609Z info ads ADS: new connection for node:2 2026-11-02T16:28:20.895726Z info cache returned workload trust anchor from cache ttl=23h59m59.104276484s 2026-11-02T16:28:21.312190Z info Readiness succeeded in 639.806592ms 2026-11-02T16:28:21.312591Z info Envoy proxy is ready 2026-11-02T16:30:57.170918Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=2 2026-11-02T16:30:59.865894Z warning envoy wasm external/envoy/source/extensions/common/wasm/wasm.cc:317 Wasm remote code fetch is unstable and may cause a crash thread=10 2026-11-02T16:31:05.769109Z critical envoy backtrace external/envoy/source/server/backtrace.h:129 Caught Segmentation fault, suspect faulting address 0x7f394c730540 thread=17 2026-11-02T16:31:05.769132Z critical envoy backtrace external/envoy/source/server/backtrace.h:113 Backtrace (use tools/stack_decode.py to get line numbers): thread=17 2026-11-02T16:31:05.769135Z critical envoy backtrace external/envoy/source/server/backtrace.h:114 Envoy version: ee7ed34b5904a08fd9225228f99ebefad6c02a25/1.36.10/3.3.7/RELEASE/OpenSSL thread=17 2026-11-02T16:31:05.769138Z critical envoy backtrace external/envoy/source/server/backtrace.h:116 Address mapping: 55c12ac90000-55c12fbcf000 /usr/local/bin/envoy thread=17 2026-11-02T16:31:05.778246Z critical envoy backtrace external/envoy/source/server/backtrace.h:121 #0: __restore_rt [0x7f3965e88b30] thread=17 2026-11-02T16:31:05.778342Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #1: [0x55c12c608e5e] thread=17 2026-11-02T16:31:05.778396Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #2: [0x55c12c60e523] thread=17 2026-11-02T16:31:05.778449Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #3: [0x55c12ca3f553] thread=17 2026-11-02T16:31:05.778501Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #4: [0x55c12c4e2c99] thread=17 2026-11-02T16:31:05.778553Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #5: [0x55c12c4e302d] thread=17 2026-11-02T16:31:05.778605Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #6: [0x55c12c4e3065] thread=17 2026-11-02T16:31:05.778656Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #7: [0x55c12c2dfaed] thread=17 2026-11-02T16:31:05.778708Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #8: [0x55c12c2decdb] thread=17 2026-11-02T16:31:05.778760Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #9: [0x55c12c2b597b] thread=17 2026-11-02T16:31:05.778812Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #10: [0x55c12bffe1d2] thread=17 2026-11-02T16:31:05.778864Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #11: [0x55c12bffe646] thread=17 2026-11-02T16:31:05.778915Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #12: [0x55c12c2bb730] thread=17 2026-11-02T16:31:05.778967Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #13: [0x55c12bffd39f] thread=17 2026-11-02T16:31:05.779031Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #14: [0x55c12bffdcc1] thread=17 2026-11-02T16:31:05.779084Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #15: [0x55c12bff8a00] thread=17 2026-11-02T16:31:05.779136Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #16: [0x55c12db196fb] thread=17 2026-11-02T16:31:05.779189Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #17: [0x55c12e3df443] thread=17 2026-11-02T16:31:05.779242Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #18: [0x55c12e64ae58] thread=17 2026-11-02T16:31:05.779295Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #19: [0x55c12e64b41f] thread=17 2026-11-02T16:31:05.779348Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #20: [0x55c12db401c3] thread=17 2026-11-02T16:31:05.779400Z critical envoy backtrace external/envoy/source/server/backtrace.h:123 #21: [0x55c12e65a4fa] thread=17 2026-11-02T16:31:05.779482Z critical envoy backtrace external/envoy/source/server/backtrace.h:121 #22: start_thread [0x7f3965ed4569] thread=17 2026-11-02T16:31:08.725494Z info ads ADS: "" 2 terminated 2026-11-02T16:31:08.725586Z warn xdsproxy downstream terminated with unexpected error send error for type url type.googleapis.com/envoy.config.listener.v3.Listener: rpc error: code = Unavailable desc = transport is closing id=2 2026-11-02T16:31:08.725591Z info ads ADS: "" 1 terminated 2026-11-02T16:31:08.725662Z error Envoy exited with error: signal: segmentation fault (core dumped) 2026-11-02T16:31:08.725792Z error xdsproxy downstream dropped delta xds push to Envoy, connection already closed id=2