2026-06-14T20:32:26.851639Z info FLAG: --concurrency="0" 2026-06-14T20:32:26.851658Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-14T20:32:26.851664Z info FLAG: --help="false" 2026-06-14T20:32:26.851667Z info FLAG: --log_as_json="false" 2026-06-14T20:32:26.851670Z info FLAG: --log_caller="" 2026-06-14T20:32:26.851673Z info FLAG: --log_output_level="default:info" 2026-06-14T20:32:26.851676Z info FLAG: --log_stacktrace_level="default:none" 2026-06-14T20:32:26.851683Z info FLAG: --log_target="[stdout]" 2026-06-14T20:32:26.851687Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-14T20:32:26.851690Z info FLAG: --outlierLogPath="" 2026-06-14T20:32:26.851693Z info FLAG: --profiling="true" 2026-06-14T20:32:26.851697Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-14T20:32:26.851700Z info FLAG: --proxyLogLevel="warning" 2026-06-14T20:32:26.851703Z info FLAG: --serviceCluster="istio-proxy" 2026-06-14T20:32:26.851705Z info FLAG: --stsPort="0" 2026-06-14T20:32:26.851708Z info FLAG: --templateFile="" 2026-06-14T20:32:26.851711Z info FLAG: --tokenManagerPlugin="" 2026-06-14T20:32:26.851714Z info FLAG: --vklog="0" 2026-06-14T20:32:26.851718Z info Version 1.27.3-f6a985379fd8fe1e5362851fe5c24e3730f643f9-Clean 2026-06-14T20:32:26.851917Z info Proxy role ips=[10.134.0.38] type=router id=maas-default-gateway-openshift-default-67497754f6-66hgb.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-14T20:32:26.851989Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-14T20:32:26.853974Z info cpu limit detected as 2, setting concurrency 2026-06-14T20:32:26.854346Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-14T20:32:26.854357Z info JWT policy is third-party-jwt 2026-06-14T20:32:26.854365Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-14T20:32:26.856800Z info Opening status port 15020 2026-06-14T20:32:26.856813Z info Starting default Istio SDS Server 2026-06-14T20:32:26.856832Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-14T20:32:26.856855Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-14T20:32:26.857563Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-14T20:32:26.858813Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-14T20:32:26.859702Z info Starting proxy agent 2026-06-14T20:32:26.859740Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-14T20:32:26.876786Z info sds Starting SDS grpc server 2026-06-14T20:32:26.876815Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-14T20:32:26.915161Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-06-14T20:32:26.915490Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-06-14T20:32:26.921864Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-14T20:32:27.011173Z info ads ADS: new connection for node:1 2026-06-14T20:32:27.011751Z info ads ADS: new connection for node:2 2026-06-14T20:32:27.140102Z info cache generated new workload certificate resourceName=default latency=282.351517ms ttl=23h59m59.85990396s 2026-06-14T20:32:27.140144Z info cache Root cert has changed, start rotating root cert 2026-06-14T20:32:27.140182Z info cache returned workload trust anchor from cache ttl=23h59m59.859818359s 2026-06-14T20:32:27.140202Z info cache returned workload certificate from cache ttl=23h59m59.85979867s 2026-06-14T20:32:27.140286Z info cache returned workload trust anchor from cache ttl=23h59m59.859717878s 2026-06-14T20:32:27.140588Z info cache returned workload trust anchor from cache ttl=23h59m59.859413154s 2026-06-14T20:32:27.187577Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-06-14T20:32:31.809125Z info Readiness succeeded in 4.9598082s 2026-06-14T20:32:31.809536Z info Envoy proxy is ready 2026-06-14T20:33:18.698412Z info ads ADS: new connection for node:3 2026-06-14T20:33:18.698580Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-14T20:33:18.698607Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-14T20:35:13.781009Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-14T20:35:13.703Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 77 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "04333055-b3f5-4f7f-a9ff-3a0c85178705" "maas.apps.5a580dd4-1b28-44fa-bcc2-f56d8c870f1b.prod.konfluxeaas.com" "10.133.0.26:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.134.0.38:41934 10.134.0.38:443 10.134.0.11:37880 - opendatahub.maas-api-route.1 2026-06-14T20:35:13.860864Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-14T20:35:13.937323Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-14T20:35:13.845Z] "GET /v1/models HTTP/1.1" 500 - via_upstream - "-" 0 96 15 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "d1ec5cae-4460-42cd-acd3-ce426e7be82f" "maas.apps.5a580dd4-1b28-44fa-bcc2-f56d8c870f1b.prod.konfluxeaas.com" "10.133.0.26:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.134.0.38:41944 10.134.0.38:443 10.134.0.11:37884 - opendatahub.maas-api-route.1 [2026-06-14T20:35:13.919Z] "DELETE /v1/api-keys/f4b49420-35a1-4f9f-9e56-c765db94bbd5 HTTP/1.1" 200 - via_upstream - "-" 0 329 17 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "609ff18a-8c9a-4e78-9fcd-c79061b32e33" "maas.apps.5a580dd4-1b28-44fa-bcc2-f56d8c870f1b.prod.konfluxeaas.com" "10.133.0.26:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.134.0.38:41934 10.134.0.38:443 10.134.0.11:37900 - opendatahub.maas-api-route.1 2026-06-14T20:35:46.506650Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-14T20:35:46.555562Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-14T20:35:46.628289Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-14T20:35:46.485Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 21 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "e3637eee-56f5-41b6-8453-3bf64035c3e6" "maas.apps.5a580dd4-1b28-44fa-bcc2-f56d8c870f1b.prod.konfluxeaas.com" "10.133.0.26:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.134.0.38:41944 10.134.0.38:443 10.134.0.11:52518 - opendatahub.maas-api-route.1 [2026-06-14T20:35:46.544Z] "GET /v1/models HTTP/1.1" 500 - via_upstream - "-" 0 96 11 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "4200d047-05cc-417b-8e66-1a50dfb69d63" "maas.apps.5a580dd4-1b28-44fa-bcc2-f56d8c870f1b.prod.konfluxeaas.com" "10.133.0.26:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.134.0.38:41944 10.134.0.38:443 10.134.0.11:52524 - opendatahub.maas-api-route.1 [2026-06-14T20:35:46.611Z] "DELETE /v1/api-keys/4ad1fffe-f6de-4cdd-b098-a44e6e507898 HTTP/1.1" 200 - via_upstream - "-" 0 329 17 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "f3ae6a3e-2a09-4ef1-9443-f667dcebf341" "maas.apps.5a580dd4-1b28-44fa-bcc2-f56d8c870f1b.prod.konfluxeaas.com" "10.133.0.26:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.134.0.38:41934 10.134.0.38:443 10.134.0.11:52530 - opendatahub.maas-api-route.1