2026-06-03T16:29:27.388440Z info FLAG: --concurrency="0" 2026-06-03T16:29:27.388464Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-03T16:29:27.388470Z info FLAG: --help="false" 2026-06-03T16:29:27.388473Z info FLAG: --log_as_json="false" 2026-06-03T16:29:27.388476Z info FLAG: --log_caller="" 2026-06-03T16:29:27.388479Z info FLAG: --log_output_level="default:info" 2026-06-03T16:29:27.388482Z info FLAG: --log_stacktrace_level="default:none" 2026-06-03T16:29:27.388490Z info FLAG: --log_target="[stdout]" 2026-06-03T16:29:27.388494Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-03T16:29:27.388497Z info FLAG: --outlierLogPath="" 2026-06-03T16:29:27.388500Z info FLAG: --profiling="true" 2026-06-03T16:29:27.388502Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-03T16:29:27.388506Z info FLAG: --proxyLogLevel="warning" 2026-06-03T16:29:27.388509Z info FLAG: --serviceCluster="istio-proxy" 2026-06-03T16:29:27.388512Z info FLAG: --stsPort="0" 2026-06-03T16:29:27.388515Z info FLAG: --templateFile="" 2026-06-03T16:29:27.388518Z info FLAG: --tokenManagerPlugin="" 2026-06-03T16:29:27.388522Z info FLAG: --vklog="0" 2026-06-03T16:29:27.388526Z info Version 1.26.2-4b1e497cd1c6b51e6a45e6c0abe9aab6bb19e0a8-Clean 2026-06-03T16:29:27.388531Z info Set max file descriptors (ulimit -n) to: 1048576 2026-06-03T16:29:27.388811Z info Proxy role ips=[10.133.0.21] type=router id=maas-default-gateway-openshift-default-7df95f575-895kw.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-03T16:29:27.388878Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-03T16:29:27.390238Z info cpu limit detected as 2, setting concurrency 2026-06-03T16:29:27.390476Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-03T16:29:27.390487Z info JWT policy is third-party-jwt 2026-06-03T16:29:27.390490Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-03T16:29:27.392093Z info Starting default Istio SDS Server 2026-06-03T16:29:27.392117Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-03T16:29:27.392153Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-03T16:29:27.392643Z info Opening status port 15020 2026-06-03T16:29:27.393072Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-03T16:29:27.396745Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-03T16:29:27.397677Z info Starting proxy agent 2026-06-03T16:29:27.397714Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-03T16:29:27.395597Z info sds Starting SDS grpc server 2026-06-03T16:29:27.415232Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-03T16:29:27.454456Z warning envoy main external/envoy/source/server/server.cc:874 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-06-03T16:29:27.454764Z warning envoy main external/envoy/source/server/server.cc:970 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-06-03T16:29:27.461042Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-03T16:29:27.541962Z info ads ADS: new connection for node:1 2026-06-03T16:29:27.542434Z info ads ADS: new connection for node:2 2026-06-03T16:29:27.602613Z info cache generated new workload certificate resourceName=default latency=209.046966ms ttl=23h59m59.397391361s 2026-06-03T16:29:27.602648Z info cache Root cert has changed, start rotating root cert 2026-06-03T16:29:27.602672Z info cache returned workload certificate from cache ttl=23h59m59.397330438s 2026-06-03T16:29:27.602679Z info cache returned workload trust anchor from cache ttl=23h59m59.397321105s 2026-06-03T16:29:27.602762Z info cache returned workload trust anchor from cache ttl=23h59m59.397238725s 2026-06-03T16:29:27.602997Z info cache returned workload trust anchor from cache ttl=23h59m59.3970036s 2026-06-03T16:29:28.398452Z info Readiness succeeded in 1.012574942s 2026-06-03T16:29:28.398735Z info Envoy proxy is ready 2026-06-03T16:32:28.546302Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-06-03T16:33:44.654255Z info ads ADS: new connection for node:3 2026-06-03T16:33:44.654406Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-03T16:33:44.654438Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt [2026-06-03T16:34:03.397Z] "- - HTTP/1.1" 426 DPE low_version - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.133.0.21:80 100.64.0.3:62480 - - [2026-06-03T16:34:41.314Z] "- - HTTP/1.1" 426 DPE low_version - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.133.0.21:80 100.64.0.2:59114 - - [2026-06-03T16:35:18.844Z] "- - HTTP/1.1" 426 DPE low_version - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:36:31.858Z] "- - HTTP/1.1" 426 DPE low_version - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.133.0.21:80 100.64.0.3:44414 - - [2026-06-03T16:36:47.300Z] "- - HTTP/1.1" 400 DPE http1.codec_error - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.133.0.21:80 100.64.0.2:38668 - - [2026-06-03T16:37:16.877Z] "GET / HTTP/1.1" 404 NR route_not_found - "-" 0 0 2 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "0cdd7c2b-9d09-4326-82f6-ca0a7ac84a24" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:19.349Z] "GET /manage/account/login HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "a98572d3-4a70-462a-bc81-98a5fa7a2007" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:20.319Z] "GET /admin/index.html HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "f9620dae-6c0e-4f94-ada4-74caac081e2a" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:21.336Z] "GET /index.html HTTP/1.1" 404 NR route_not_found - "-" 0 0 1 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "57ecc4d2-0045-4413-bc37-74d9dacc61f5" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:23.817Z] "GET /+CSCOE+/logon.html HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "34912d13-5b2b-4efa-bda0-a3105f0323af" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:29.324Z] "GET /cgi-bin/login.cgi HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "5909693c-73e8-40a4-8493-db1563512a4b" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:33.322Z] "GET /login.htm HTTP/1.1" 404 NR route_not_found - "-" 0 0 1 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "6ee54e68-e66c-4e02-98e1-a83db0e1605d" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:37:34.897Z] "GET /login.html HTTP/1.1" 404 NR route_not_found - "-" 0 0 1 - "100.64.0.4" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "66e783e0-ef36-40ff-978b-72eda16855e5" "98.86.129.207" "-" - - 10.133.0.21:80 100.64.0.4:17884 - - [2026-06-03T16:39:51.771Z] "- - HTTP/1.1" 426 DPE low_version - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.133.0.21:80 100.64.0.3:63348 - -