2026-11-03T00:10:33.388664Z info FLAG: --concurrency="0" 2026-11-03T00:10:33.388683Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-11-03T00:10:33.388687Z info FLAG: --help="false" 2026-11-03T00:10:33.388689Z info FLAG: --log_as_json="false" 2026-11-03T00:10:33.388692Z info FLAG: --log_caller="" 2026-11-03T00:10:33.388694Z info FLAG: --log_output_level="default:info" 2026-11-03T00:10:33.388696Z info FLAG: --log_stacktrace_level="default:none" 2026-11-03T00:10:33.388700Z info FLAG: --log_target="[stdout]" 2026-11-03T00:10:33.388702Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-11-03T00:10:33.388704Z info FLAG: --outlierLogPath="" 2026-11-03T00:10:33.388707Z info FLAG: --profiling="true" 2026-11-03T00:10:33.388709Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-11-03T00:10:33.388711Z info FLAG: --proxyLogLevel="warning" 2026-11-03T00:10:33.388713Z info FLAG: --serviceCluster="istio-proxy" 2026-11-03T00:10:33.388715Z info FLAG: --stsPort="0" 2026-11-03T00:10:33.388717Z info FLAG: --templateFile="" 2026-11-03T00:10:33.388719Z info FLAG: --tokenManagerPlugin="" 2026-11-03T00:10:33.388721Z info FLAG: --vklog="0" 2026-11-03T00:10:33.388724Z info Version 1.28.10-cebc47d567fd1333707199224c18129ecfe07c05-Clean 2026-11-03T00:10:33.388866Z info Proxy role ips=[10.132.0.48] type=router id=data-science-gateway-data-science-gateway-class-549f9d654fqchwv.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-11-03T00:10:33.388933Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-11-03T00:10:33.389943Z info cpu limit detected as 2, setting concurrency 2026-11-03T00:10:33.390145Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-11-03T00:10:33.390156Z info JWT policy is third-party-jwt 2026-11-03T00:10:33.390158Z info using credential fetcher of JWT type in cluster.local trust domain 2026-11-03T00:10:33.392049Z info Starting default Istio SDS Server 2026-11-03T00:10:33.392605Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-11-03T00:10:33.392646Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-11-03T00:10:33.392627Z info Opening status port 15020 2026-11-03T00:10:33.393189Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-11-03T00:10:33.393834Z info sds Starting SDS grpc server 2026-11-03T00:10:33.393849Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-11-03T00:10:33.394601Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-11-03T00:10:33.395357Z info Starting proxy agent 2026-11-03T00:10:33.395386Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-11-03T00:10:33.458085Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-11-03T00:10:33.560838Z info ads ADS: new connection for node:1 2026-11-03T00:10:33.561396Z info ads ADS: new connection for node:2 2026-11-03T00:10:33.588006Z info cache generated new workload certificate resourceName=default latency=194.014094ms ttl=23h59m59.411996775s 2026-11-03T00:10:33.588038Z info cache Root cert has changed, start rotating root cert 2026-11-03T00:10:33.588068Z info cache returned workload certificate from cache ttl=23h59m59.411935623s 2026-11-03T00:10:33.588081Z info cache returned workload trust anchor from cache ttl=23h59m59.411920747s 2026-11-03T00:10:33.588182Z info cache returned workload trust anchor from cache ttl=23h59m59.411819393s 2026-11-03T00:10:33.588952Z info cache returned workload trust anchor from cache ttl=23h59m59.411063036s 2026-11-03T00:10:34.956969Z info Readiness succeeded in 1.570577769s 2026-11-03T00:10:34.957460Z info Envoy proxy is ready 2026-11-03T00:11:38.429289Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=2 2026-11-03T00:18:18.021329Z info ads ADS: new connection for node:3 2026-11-03T00:18:18.026715Z info cache adding watcher for file certificate /etc/pki/tls/certs/ca-bundle.crt 2026-11-03T00:18:18.026767Z info cache read certificate from file resource=file-root:system 2026-11-03T00:20:24.052664Z info ads ADS: "" 3 terminated 2026-11-03T00:40:08.475697Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=3 2026-11-03T00:41:52.434716Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=4 2026-11-03T00:43:07.235501Z info ads ADS: new connection for node:4 2026-11-03T00:43:07.240634Z info cache read certificate from file resource=file-root:system 2026-11-03T00:55:15.993736Z info ads ADS: new connection for node:5 2026-11-03T00:55:16.008578Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T00:55:16.008655Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T00:57:03.618634Z info ads ADS: "" 5 terminated with stream closed 2026-11-03T00:57:27.699296Z info ads ADS: "" 4 terminated with stream closed 2026-11-03T00:59:35.368104Z info cache event for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt : REMOVE, pushing to proxy 2026-11-03T01:11:45.235054Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=5 2026-11-03T01:12:42.731546Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=6 2026-11-03T01:20:47.200204Z info ads ADS: new connection for node:6 2026-11-03T01:20:47.200429Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T01:20:47.200463Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T01:21:49.759175Z info ads ADS: "" 6 terminated with stream closed 2026-11-03T01:26:24.700837Z info ads ADS: new connection for node:7 2026-11-03T01:26:24.713051Z info cache read certificate from file resource=file-root:system 2026-11-03T01:28:02.918174Z info ads ADS: "" 7 terminated with stream closed