2026-06-09T02:27:48.598247Z info FLAG: --concurrency="0" 2026-06-09T02:27:48.598263Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-09T02:27:48.598267Z info FLAG: --help="false" 2026-06-09T02:27:48.598269Z info FLAG: --log_as_json="false" 2026-06-09T02:27:48.598271Z info FLAG: --log_caller="" 2026-06-09T02:27:48.598273Z info FLAG: --log_output_level="default:info" 2026-06-09T02:27:48.598275Z info FLAG: --log_stacktrace_level="default:none" 2026-06-09T02:27:48.598283Z info FLAG: --log_target="[stdout]" 2026-06-09T02:27:48.598286Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-09T02:27:48.598288Z info FLAG: --outlierLogPath="" 2026-06-09T02:27:48.598289Z info FLAG: --profiling="true" 2026-06-09T02:27:48.598291Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-09T02:27:48.598293Z info FLAG: --proxyLogLevel="warning" 2026-06-09T02:27:48.598295Z info FLAG: --serviceCluster="istio-proxy" 2026-06-09T02:27:48.598297Z info FLAG: --stsPort="0" 2026-06-09T02:27:48.598299Z info FLAG: --templateFile="" 2026-06-09T02:27:48.598301Z info FLAG: --tokenManagerPlugin="" 2026-06-09T02:27:48.598303Z info FLAG: --vklog="0" 2026-06-09T02:27:48.598306Z info Version 1.27.3-f6a985379fd8fe1e5362851fe5c24e3730f643f9-Clean 2026-06-09T02:27:48.598498Z info Proxy role ips=[10.133.0.36] type=router id=data-science-gateway-data-science-gateway-class-74759f9795mgxvw.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-09T02:27:48.598554Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-09T02:27:48.599789Z info cpu limit detected as 2, setting concurrency 2026-06-09T02:27:48.600006Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-09T02:27:48.600017Z info JWT policy is third-party-jwt 2026-06-09T02:27:48.600020Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-09T02:27:48.601947Z info Starting default Istio SDS Server 2026-06-09T02:27:48.601973Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-09T02:27:48.601994Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-09T02:27:48.602434Z info Opening status port 15020 2026-06-09T02:27:48.603411Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-09T02:27:48.604565Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-09T02:27:48.605449Z info Starting proxy agent 2026-06-09T02:27:48.605480Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-09T02:27:48.614036Z info sds Starting SDS grpc server 2026-06-09T02:27:48.614057Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-09T02:27:48.659060Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=7 2026-06-09T02:27:48.659325Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=7 2026-06-09T02:27:48.664911Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-09T02:27:48.737508Z info ads ADS: new connection for node:1 2026-06-09T02:27:48.737886Z info ads ADS: new connection for node:2 2026-06-09T02:27:49.118147Z info cache generated new workload certificate resourceName=default latency=515.162276ms ttl=23h59m59.881855756s 2026-06-09T02:27:49.118175Z info cache Root cert has changed, start rotating root cert 2026-06-09T02:27:49.118211Z info cache returned workload trust anchor from cache ttl=23h59m59.881790826s 2026-06-09T02:27:49.118231Z info cache returned workload certificate from cache ttl=23h59m59.881769672s 2026-06-09T02:27:49.118320Z info cache returned workload trust anchor from cache ttl=23h59m59.881683688s 2026-06-09T02:27:49.118644Z info cache returned workload trust anchor from cache ttl=23h59m59.881356779s 2026-06-09T02:27:49.881032Z info Readiness succeeded in 1.285048881s 2026-06-09T02:27:49.881362Z info Envoy proxy is ready 2026-06-09T02:33:17.042606Z info ads ADS: new connection for node:3 2026-06-09T02:33:17.042724Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-09T02:33:17.042746Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-09T02:38:13.251025Z info ads ADS: new connection for node:4 2026-06-09T02:38:13.253045Z info cache adding watcher for file certificate /etc/pki/tls/certs/ca-bundle.crt 2026-06-09T02:38:13.253097Z info cache read certificate from file resource=file-root:system 2026-06-09T02:38:29.771117Z info ads ADS: "" 4 terminated with stream closed 2026-06-09T02:38:43.859650Z info ads ADS: new connection for node:5 2026-06-09T02:38:43.864173Z info cache read certificate from file resource=file-root:system 2026-06-09T02:39:00.430319Z info ads ADS: "" 5 terminated 2026-06-09T02:56:23.639756Z info ads ADS: new connection for node:6 2026-06-09T02:56:23.641884Z info cache read certificate from file resource=file-root:system 2026-06-09T02:57:06.380287Z info ads ADS: "" 6 terminated