2026-06-10T19:33:54.242891Z info FLAG: --concurrency="0" 2026-06-10T19:33:54.242907Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-10T19:33:54.242911Z info FLAG: --help="false" 2026-06-10T19:33:54.242914Z info FLAG: --log_as_json="false" 2026-06-10T19:33:54.242916Z info FLAG: --log_caller="" 2026-06-10T19:33:54.242918Z info FLAG: --log_output_level="default:info" 2026-06-10T19:33:54.242920Z info FLAG: --log_stacktrace_level="default:none" 2026-06-10T19:33:54.242925Z info FLAG: --log_target="[stdout]" 2026-06-10T19:33:54.242928Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-10T19:33:54.242930Z info FLAG: --outlierLogPath="" 2026-06-10T19:33:54.242932Z info FLAG: --profiling="true" 2026-06-10T19:33:54.243000Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-10T19:33:54.243002Z info FLAG: --proxyLogLevel="warning" 2026-06-10T19:33:54.243004Z info FLAG: --serviceCluster="istio-proxy" 2026-06-10T19:33:54.243006Z info FLAG: --stsPort="0" 2026-06-10T19:33:54.243008Z info FLAG: --templateFile="" 2026-06-10T19:33:54.243010Z info FLAG: --tokenManagerPlugin="" 2026-06-10T19:33:54.243013Z info FLAG: --vklog="0" 2026-06-10T19:33:54.243015Z info Version 1.27.3-f6a985379fd8fe1e5362851fe5c24e3730f643f9-Clean 2026-06-10T19:33:54.243148Z info Proxy role ips=[10.133.0.36] type=router id=maas-default-gateway-openshift-default-687ff6996-9grz6.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-10T19:33:54.243197Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-10T19:33:54.244528Z info cpu limit detected as 2, setting concurrency 2026-06-10T19:33:54.245161Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-10T19:33:54.245206Z info JWT policy is third-party-jwt 2026-06-10T19:33:54.245217Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-10T19:33:54.247506Z info Opening status port 15020 2026-06-10T19:33:54.247517Z info Starting default Istio SDS Server 2026-06-10T19:33:54.248184Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-10T19:33:54.248214Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-10T19:33:54.248654Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-10T19:33:54.249810Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-10T19:33:54.250667Z info Starting proxy agent 2026-06-10T19:33:54.250704Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-10T19:33:54.258505Z info sds Starting SDS grpc server 2026-06-10T19:33:54.258526Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-10T19:33:54.310519Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-06-10T19:33:54.310849Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-06-10T19:33:54.318005Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-10T19:33:54.414840Z info ads ADS: new connection for node:1 2026-06-10T19:33:54.415257Z info ads ADS: new connection for node:2 2026-06-10T19:33:54.869676Z info cache generated new workload certificate resourceName=default latency=620.800052ms ttl=23h59m59.130331131s 2026-06-10T19:33:54.869720Z info cache Root cert has changed, start rotating root cert 2026-06-10T19:33:54.869759Z info cache returned workload trust anchor from cache ttl=23h59m59.130241723s 2026-06-10T19:33:54.869782Z info cache returned workload certificate from cache ttl=23h59m59.130218224s 2026-06-10T19:33:54.869870Z info cache returned workload trust anchor from cache ttl=23h59m59.130133556s 2026-06-10T19:33:54.870213Z info cache returned workload trust anchor from cache ttl=23h59m59.129787763s 2026-06-10T19:33:54.916782Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-06-10T19:34:00.056337Z info Readiness succeeded in 5.815769241s 2026-06-10T19:34:00.056636Z info Envoy proxy is ready 2026-06-10T19:36:55.825041Z info ads ADS: new connection for node:3 2026-06-10T19:36:55.825299Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-10T19:36:55.825328Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-10T19:38:51.348344Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-06-10T19:38:51.263Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 321 84 - "52.71.36.72,10.132.0.17" "curl/7.76.1" "453b4475-7dd9-45b8-82cf-88bf657c869f" "maas.apps.9f14be36-d0ae-441f-bac2-03ff55621f45.prod.konfluxeaas.com" "10.133.0.42:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.36:40204 10.133.0.36:443 10.132.0.17:35408 - opendatahub.maas-api-route.1 2026-06-10T19:38:51.456499Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-10T19:38:51.458556Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-10T19:38:51.422Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 150 34 - "10.133.0.42" "Go-http-client/1.1" "4e20765b-1884-4277-9a68-faffd42d1bba" "maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local" "10.133.0.49:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.133.0.36:55156 10.133.0.36:443 10.133.0.42:46330 maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local llm.facebook-opt-125m-simulated-kserve-route.3 [2026-06-10T19:38:51.392Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 597 66 - "52.71.36.72,10.132.0.17" "curl/7.76.1" "f45c5a68-aec8-4dbb-a012-59790283db92" "maas.apps.9f14be36-d0ae-441f-bac2-03ff55621f45.prod.konfluxeaas.com" "10.133.0.42:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.36:40214 10.133.0.36:443 10.132.0.17:35418 - opendatahub.maas-api-route.1 2026-06-10T19:38:51.697200Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-10T19:38:51.678Z] "DELETE /v1/api-keys/a68b80b3-7924-42e9-9b57-3444d0cb29bd HTTP/1.1" 200 - via_upstream - "-" 0 334 18 - "52.71.36.72,10.132.0.17" "curl/7.76.1" "e274c67b-3cfd-4efe-a416-501e194192ac" "maas.apps.9f14be36-d0ae-441f-bac2-03ff55621f45.prod.konfluxeaas.com" "10.133.0.42:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.36:40214 10.133.0.36:443 10.132.0.17:35434 - opendatahub.maas-api-route.1 2026-06-10T19:39:24.319857Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-10T19:39:24.382020Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-10T19:39:24.382891Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 2026-06-10T19:39:24.610271Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-06-10T19:39:24.299Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 20 - "52.71.36.72,10.132.0.17" "curl/7.76.1" "8d7532fc-8544-4e2d-94b6-ae7816f75ec8" "maas.apps.9f14be36-d0ae-441f-bac2-03ff55621f45.prod.konfluxeaas.com" "10.133.0.42:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.36:40204 10.133.0.36:443 10.132.0.17:56790 - opendatahub.maas-api-route.1 [2026-06-10T19:39:24.372Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 150 9 - "10.133.0.42" "Go-http-client/1.1" "462ba30e-96b4-4f55-991a-442c602cd584" "maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local" "10.133.0.49:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.133.0.36:55156 10.133.0.36:443 10.133.0.42:46330 maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local llm.facebook-opt-125m-simulated-kserve-route.3 [2026-06-10T19:39:24.365Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 597 17 - "52.71.36.72,10.132.0.17" "curl/7.76.1" "150d86a7-e322-4ec1-92df-fbcb5f714dc5" "maas.apps.9f14be36-d0ae-441f-bac2-03ff55621f45.prod.konfluxeaas.com" "10.133.0.42:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.36:40214 10.133.0.36:443 10.132.0.17:56798 - opendatahub.maas-api-route.1 [2026-06-10T19:39:24.592Z] "DELETE /v1/api-keys/45c8d96e-d9e2-4482-a7cc-450d5820ee52 HTTP/1.1" 200 - via_upstream - "-" 0 334 17 - "52.71.36.72,10.132.0.17" "curl/7.76.1" "010438d8-68ae-4e9d-9dc5-8c8e9a9991b9" "maas.apps.9f14be36-d0ae-441f-bac2-03ff55621f45.prod.konfluxeaas.com" "10.133.0.42:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.36:40204 10.133.0.36:443 10.132.0.17:56814 - opendatahub.maas-api-route.1