2026-07-02T15:05:14.140349Z info FLAG: --concurrency="0" 2026-07-02T15:05:14.140365Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-07-02T15:05:14.140369Z info FLAG: --help="false" 2026-07-02T15:05:14.140371Z info FLAG: --log_as_json="false" 2026-07-02T15:05:14.140373Z info FLAG: --log_caller="" 2026-07-02T15:05:14.140375Z info FLAG: --log_output_level="default:info" 2026-07-02T15:05:14.140377Z info FLAG: --log_stacktrace_level="default:none" 2026-07-02T15:05:14.140385Z info FLAG: --log_target="[stdout]" 2026-07-02T15:05:14.140387Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-07-02T15:05:14.140389Z info FLAG: --outlierLogPath="" 2026-07-02T15:05:14.140392Z info FLAG: --profiling="true" 2026-07-02T15:05:14.140394Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-07-02T15:05:14.140396Z info FLAG: --proxyLogLevel="warning" 2026-07-02T15:05:14.140398Z info FLAG: --serviceCluster="istio-proxy" 2026-07-02T15:05:14.140400Z info FLAG: --stsPort="0" 2026-07-02T15:05:14.140402Z info FLAG: --templateFile="" 2026-07-02T15:05:14.140404Z info FLAG: --tokenManagerPlugin="" 2026-07-02T15:05:14.140407Z info FLAG: --vklog="0" 2026-07-02T15:05:14.140409Z info Version 1.27.3-37b7f6000f7028267567a35c7bececc743cce560-Clean 2026-07-02T15:05:14.140559Z info Proxy role ips=[10.132.0.50] type=router id=maas-default-gateway-openshift-default-5896d4dd49-mcbvz.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-07-02T15:05:14.140611Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-07-02T15:05:14.141824Z info cpu limit detected as 2, setting concurrency 2026-07-02T15:05:14.142054Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-07-02T15:05:14.142064Z info JWT policy is third-party-jwt 2026-07-02T15:05:14.142067Z info using credential fetcher of JWT type in cluster.local trust domain 2026-07-02T15:05:14.143754Z info Starting default Istio SDS Server 2026-07-02T15:05:14.143772Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-07-02T15:05:14.143794Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-07-02T15:05:14.144207Z info Opening status port 15020 2026-07-02T15:05:14.145044Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-07-02T15:05:14.146026Z info sds Starting SDS grpc server 2026-07-02T15:05:14.146107Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-07-02T15:05:14.146389Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-07-02T15:05:14.147252Z info Starting proxy agent 2026-07-02T15:05:14.147281Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-07-02T15:05:14.202534Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=8 2026-07-02T15:05:14.202835Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=8 2026-07-02T15:05:14.208313Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-07-02T15:05:14.292436Z info ads ADS: new connection for node:1 2026-07-02T15:05:14.293070Z info ads ADS: new connection for node:2 2026-07-02T15:05:14.389703Z info cache generated new workload certificate resourceName=default latency=243.524746ms ttl=23h59m59.610301345s 2026-07-02T15:05:14.389739Z info cache Root cert has changed, start rotating root cert 2026-07-02T15:05:14.390062Z info cache returned workload trust anchor from cache ttl=23h59m59.609940368s 2026-07-02T15:05:14.390077Z info cache returned workload certificate from cache ttl=23h59m59.60992799s 2026-07-02T15:05:14.390357Z info cache returned workload trust anchor from cache ttl=23h59m59.609646674s 2026-07-02T15:05:14.390796Z info cache returned workload trust anchor from cache ttl=23h59m59.609204758s 2026-07-02T15:05:14.436780Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-07-02T15:05:19.752417Z info Readiness succeeded in 5.614485046s 2026-07-02T15:05:19.752729Z info Envoy proxy is ready 2026-07-02T15:06:03.655653Z info ads ADS: new connection for node:3 2026-07-02T15:06:03.655855Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-07-02T15:06:03.655884Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-07-02T15:09:03.500922Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=24 [2026-07-02T15:09:03.405Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 95 - "44.212.242.249,10.132.0.9" "curl/7.76.1" "df34a710-f053-4c95-8e07-29d7b3f66661" "maas.apps.39e6d8cc-fba1-4820-a2cf-503aefc81570.prod.konfluxeaas.com" "10.133.0.29:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.50:53548 10.132.0.50:443 10.132.0.9:52746 - opendatahub.maas-api-route.1 [2026-07-02T15:09:03.581Z] "GET /v1/models HTTP/1.1" 500 - ext_proc_error_gRPC_error_13{upstream_reset_after_response_started{connection_termination}} - "-" 0 0 42 - "10.133.0.29" "Go-http-client/1.1" "859b7904-6e19-4c1b-b76b-e6b243bbf0e6" "maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local" "10.133.0.34:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.132.0.50:50120 10.132.0.50:443 10.133.0.29:34332 maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local llm.facebook-opt-125m-simulated-kserve-route.6 [2026-07-02T15:09:03.554Z] "GET /v1/models HTTP/1.1" 500 - ext_proc_error_gRPC_error_13{upstream_reset_after_response_started{connection_termination}} - "-" 0 0 71 - "44.212.242.249,10.132.0.9" "curl/7.76.1" "c65ff648-8bef-4e33-95d8-99a112e267ea" "maas.apps.39e6d8cc-fba1-4820-a2cf-503aefc81570.prod.konfluxeaas.com" "10.133.0.29:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.50:53548 10.132.0.50:443 10.132.0.9:52754 - opendatahub.maas-api-route.1 [2026-07-02T15:09:03.660Z] "DELETE /maas-api/v1/api-keys/7500ae82-8524-4613-ae82-8edc658e77ce HTTP/1.1" 500 - ext_proc_error_gRPC_error_14{upstream_connect_error_or_disconnect/reset_before_headers._reset_reason:_remote_connection_failure,_transport_failure_reason:_delayed_connect_error:_Connection_refused{upstream_reset_before_response_started{remote_connection_failure|delayed_connect_error:_Connection_refused}}} - "-" 0 0 17 - "44.212.242.249,10.132.0.9" "curl/7.76.1" "50a3b262-8dda-4bf6-8053-cb108d4a3019" "maas.apps.39e6d8cc-fba1-4820-a2cf-503aefc81570.prod.konfluxeaas.com" "-" outbound|8443||maas-api.opendatahub.svc.cluster.local - 10.132.0.50:443 10.132.0.9:52758 - opendatahub.maas-api-route.1 2026-07-02T15:09:36.385752Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=24 [2026-07-02T15:09:36.344Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 321 40 - "44.212.242.249,10.132.0.9" "curl/7.76.1" "18c0636c-6ce9-4b0a-9ba5-efbe65b18c62" "maas.apps.39e6d8cc-fba1-4820-a2cf-503aefc81570.prod.konfluxeaas.com" "10.133.0.29:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.50:42746 10.132.0.50:443 10.132.0.9:42640 - opendatahub.maas-api-route.1 [2026-07-02T15:09:36.445Z] "GET /v1/models HTTP/1.1" 500 - ext_proc_error_gRPC_error_13{upstream_reset_after_response_started{connection_termination}} - "-" 0 0 16 - "10.133.0.29" "Go-http-client/1.1" "d97710c6-a033-4b3b-a66f-a86af84b62e9" "maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local" "10.133.0.34:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.132.0.50:50120 10.132.0.50:443 10.133.0.29:52216 maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local llm.facebook-opt-125m-simulated-kserve-route.6 [2026-07-02T15:09:36.428Z] "GET /v1/models HTTP/1.1" 500 - ext_proc_error_gRPC_error_13{upstream_reset_after_response_started{connection_termination}} - "-" 0 0 34 - "44.212.242.249,10.132.0.9" "curl/7.76.1" "2afd9be3-912b-46ca-844e-a1e68288bd5a" "maas.apps.39e6d8cc-fba1-4820-a2cf-503aefc81570.prod.konfluxeaas.com" "10.133.0.29:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.50:42746 10.132.0.50:443 10.132.0.9:42644 - opendatahub.maas-api-route.1 [2026-07-02T15:09:36.498Z] "DELETE /maas-api/v1/api-keys/f5f19011-5c68-4c8a-ad62-b509e5269334 HTTP/1.1" 500 - ext_proc_error_gRPC_error_14{upstream_connect_error_or_disconnect/reset_before_headers._reset_reason:_remote_connection_failure,_transport_failure_reason:_delayed_connect_error:_Connection_refused{upstream_reset_before_response_started{remote_connection_failure|delayed_connect_error:_Connection_refused}}} - "-" 0 0 15 - "44.212.242.249,10.132.0.9" "curl/7.76.1" "2e8829a1-f5f8-4c8e-bb9f-b9f0253801d9" "maas.apps.39e6d8cc-fba1-4820-a2cf-503aefc81570.prod.konfluxeaas.com" "-" outbound|8443||maas-api.opendatahub.svc.cluster.local - 10.132.0.50:443 10.132.0.9:42656 - opendatahub.maas-api-route.1