2026-06-10T17:17:49.254675Z info FLAG: --concurrency="0" 2026-06-10T17:17:49.254702Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-10T17:17:49.254706Z info FLAG: --help="false" 2026-06-10T17:17:49.254709Z info FLAG: --log_as_json="false" 2026-06-10T17:17:49.254711Z info FLAG: --log_caller="" 2026-06-10T17:17:49.254713Z info FLAG: --log_output_level="default:info" 2026-06-10T17:17:49.254715Z info FLAG: --log_stacktrace_level="default:none" 2026-06-10T17:17:49.254724Z info FLAG: --log_target="[stdout]" 2026-06-10T17:17:49.254726Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-10T17:17:49.254728Z info FLAG: --outlierLogPath="" 2026-06-10T17:17:49.254730Z info FLAG: --profiling="true" 2026-06-10T17:17:49.254732Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-10T17:17:49.254734Z info FLAG: --proxyLogLevel="warning" 2026-06-10T17:17:49.254736Z info FLAG: --serviceCluster="istio-proxy" 2026-06-10T17:17:49.254739Z info FLAG: --stsPort="0" 2026-06-10T17:17:49.254741Z info FLAG: --templateFile="" 2026-06-10T17:17:49.254743Z info FLAG: --tokenManagerPlugin="" 2026-06-10T17:17:49.254745Z info FLAG: --vklog="0" 2026-06-10T17:17:49.254748Z info Version 1.27.3-f6a985379fd8fe1e5362851fe5c24e3730f643f9-Clean 2026-06-10T17:17:49.254912Z info Proxy role ips=[10.132.0.44] type=router id=maas-default-gateway-openshift-default-8559cd5744-6bztp.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-10T17:17:49.254965Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-10T17:17:49.256300Z info cpu limit detected as 2, setting concurrency 2026-06-10T17:17:49.256971Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-10T17:17:49.257014Z info JWT policy is third-party-jwt 2026-06-10T17:17:49.257021Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-10T17:17:49.259459Z info Opening status port 15020 2026-06-10T17:17:49.259479Z info Starting default Istio SDS Server 2026-06-10T17:17:49.259496Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-10T17:17:49.259520Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-10T17:17:49.260261Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-10T17:17:49.260705Z info sds Starting SDS grpc server 2026-06-10T17:17:49.260720Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-10T17:17:49.262008Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-10T17:17:49.263110Z info Starting proxy agent 2026-06-10T17:17:49.263154Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-10T17:17:49.320278Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=8 2026-06-10T17:17:49.320621Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=8 2026-06-10T17:17:49.326811Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-10T17:17:49.418830Z info ads ADS: new connection for node:1 2026-06-10T17:17:49.419286Z info ads ADS: new connection for node:2 2026-06-10T17:17:49.462133Z info cache generated new workload certificate resourceName=default latency=200.892907ms ttl=23h59m59.537871737s 2026-06-10T17:17:49.462168Z info cache Root cert has changed, start rotating root cert 2026-06-10T17:17:49.462204Z info cache returned workload trust anchor from cache ttl=23h59m59.537796166s 2026-06-10T17:17:49.462223Z info cache returned workload certificate from cache ttl=23h59m59.537777004s 2026-06-10T17:17:49.462307Z info cache returned workload trust anchor from cache ttl=23h59m59.537697425s 2026-06-10T17:17:49.462617Z info cache returned workload trust anchor from cache ttl=23h59m59.537383924s 2026-06-10T17:17:49.509887Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-06-10T17:17:53.972634Z info Readiness succeeded in 4.720255923s 2026-06-10T17:17:53.972915Z info Envoy proxy is ready 2026-06-10T17:20:40.801468Z info ads ADS: new connection for node:3 2026-06-10T17:20:40.801633Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-10T17:20:40.801664Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-10T17:23:48.646178Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-06-10T17:23:48.568Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 77 - "52.71.36.72,10.132.0.11" "curl/7.76.1" "1205e811-2a83-4dab-9586-ac59d92c946a" "maas.apps.237ca66e-29b3-49e4-9353-0fc21198d7a6.prod.konfluxeaas.com" "10.134.0.27:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.44:52762 10.132.0.44:443 10.132.0.11:57878 - opendatahub.maas-api-route.1 2026-06-10T17:23:48.765865Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 2026-06-10T17:23:48.768222Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-06-10T17:23:49.004651Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-10T17:23:48.724Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 150 41 - "10.134.0.27" "Go-http-client/1.1" "a686787f-4a54-4c5b-9c30-7337c4548a24" "maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local" "10.134.0.31:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.132.0.44:51984 10.132.0.44:443 10.134.0.27:45916 maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local llm.facebook-opt-125m-simulated-kserve-route.3 [2026-06-10T17:23:48.698Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 597 70 - "52.71.36.72,10.132.0.11" "curl/7.76.1" "58478935-fed3-499b-9834-e0e365b72433" "maas.apps.237ca66e-29b3-49e4-9353-0fc21198d7a6.prod.konfluxeaas.com" "10.134.0.27:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.44:52762 10.132.0.44:443 10.132.0.11:57892 - opendatahub.maas-api-route.1 [2026-06-10T17:23:48.984Z] "DELETE /v1/api-keys/0b33ada0-6f90-46ad-ac9d-b4b52cbedd7e HTTP/1.1" 200 - via_upstream - "-" 0 334 20 - "52.71.36.72,10.132.0.11" "curl/7.76.1" "3cbd5c95-16c1-49fd-8d55-06957623b23c" "maas.apps.237ca66e-29b3-49e4-9353-0fc21198d7a6.prod.konfluxeaas.com" "10.134.0.27:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.44:52772 10.132.0.44:443 10.132.0.11:57908 - opendatahub.maas-api-route.1 2026-06-10T17:24:21.692943Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 2026-06-10T17:24:21.758675Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 2026-06-10T17:24:21.759809Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 2026-06-10T17:24:22.002312Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-06-10T17:24:21.672Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 321 20 - "52.71.36.72,10.132.0.11" "curl/7.76.1" "4d428094-9b43-4742-ba16-b4e6de29dffd" "maas.apps.237ca66e-29b3-49e4-9353-0fc21198d7a6.prod.konfluxeaas.com" "10.134.0.27:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.44:52772 10.132.0.44:443 10.132.0.11:57548 - opendatahub.maas-api-route.1 [2026-06-10T17:24:21.748Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 150 10 - "10.134.0.27" "Go-http-client/1.1" "c6fe7706-5076-4f7d-bfc0-05a7dfc4c46d" "maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local" "10.134.0.31:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.132.0.44:51984 10.132.0.44:443 10.134.0.27:45916 maas-default-gateway-openshift-default.openshift-ingress.svc.cluster.local llm.facebook-opt-125m-simulated-kserve-route.3 [2026-06-10T17:24:21.741Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 597 18 - "52.71.36.72,10.132.0.11" "curl/7.76.1" "0bc88f45-2a88-477e-ba5d-8c35c9c3796e" "maas.apps.237ca66e-29b3-49e4-9353-0fc21198d7a6.prod.konfluxeaas.com" "10.134.0.27:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.44:52772 10.132.0.44:443 10.132.0.11:57552 - opendatahub.maas-api-route.1 [2026-06-10T17:24:21.985Z] "DELETE /v1/api-keys/9864a8cc-a572-4355-921a-e3d52204d45a HTTP/1.1" 200 - via_upstream - "-" 0 334 17 - "52.71.36.72,10.132.0.11" "curl/7.76.1" "5225d968-6909-4224-bf89-321f3dcdc40c" "maas.apps.237ca66e-29b3-49e4-9353-0fc21198d7a6.prod.konfluxeaas.com" "10.134.0.27:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.132.0.44:52772 10.132.0.44:443 10.132.0.11:57566 - opendatahub.maas-api-route.1