2026-07-23T18:54:13.782469Z info FLAG: --concurrency="0" 2026-07-23T18:54:13.782489Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-07-23T18:54:13.782493Z info FLAG: --help="false" 2026-07-23T18:54:13.782495Z info FLAG: --log_as_json="false" 2026-07-23T18:54:13.782497Z info FLAG: --log_caller="" 2026-07-23T18:54:13.782499Z info FLAG: --log_output_level="default:info" 2026-07-23T18:54:13.782502Z info FLAG: --log_stacktrace_level="default:none" 2026-07-23T18:54:13.782507Z info FLAG: --log_target="[stdout]" 2026-07-23T18:54:13.782510Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-07-23T18:54:13.782512Z info FLAG: --outlierLogPath="" 2026-07-23T18:54:13.782514Z info FLAG: --profiling="true" 2026-07-23T18:54:13.782516Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-07-23T18:54:13.782519Z info FLAG: --proxyLogLevel="warning" 2026-07-23T18:54:13.782520Z info FLAG: --serviceCluster="istio-proxy" 2026-07-23T18:54:13.782523Z info FLAG: --stsPort="0" 2026-07-23T18:54:13.782524Z info FLAG: --templateFile="" 2026-07-23T18:54:13.782526Z info FLAG: --tokenManagerPlugin="" 2026-07-23T18:54:13.782529Z info FLAG: --vklog="0" 2026-07-23T18:54:13.782531Z info Version 1.27.3-37b7f6000f7028267567a35c7bececc743cce560-Clean 2026-07-23T18:54:13.782800Z info Proxy role ips=[10.134.0.37] type=router id=maas-default-gateway-openshift-default-56654dcf7-xv8mw.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-07-23T18:54:13.782860Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-07-23T18:54:13.784454Z info cpu limit detected as 2, setting concurrency 2026-07-23T18:54:13.784754Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-07-23T18:54:13.784767Z info JWT policy is third-party-jwt 2026-07-23T18:54:13.784769Z info using credential fetcher of JWT type in cluster.local trust domain 2026-07-23T18:54:13.788113Z info Starting default Istio SDS Server 2026-07-23T18:54:13.788139Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-07-23T18:54:13.788166Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-07-23T18:54:13.788368Z info Opening status port 15020 2026-07-23T18:54:13.789151Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-07-23T18:54:13.790534Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-07-23T18:54:13.791446Z info Starting proxy agent 2026-07-23T18:54:13.791488Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-07-23T18:54:13.794718Z info sds Starting SDS grpc server 2026-07-23T18:54:13.794742Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-07-23T18:54:13.848750Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-07-23T18:54:13.849083Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-07-23T18:54:13.854970Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-07-23T18:54:13.945052Z info ads ADS: new connection for node:1 2026-07-23T18:54:13.945515Z info ads ADS: new connection for node:2 2026-07-23T18:54:14.071827Z info cache generated new workload certificate resourceName=default latency=282.480559ms ttl=23h59m59.928178194s 2026-07-23T18:54:14.071877Z info cache Root cert has changed, start rotating root cert 2026-07-23T18:54:14.071905Z info cache returned workload certificate from cache ttl=23h59m59.928102128s 2026-07-23T18:54:14.071920Z info cache returned workload trust anchor from cache ttl=23h59m59.928081025s 2026-07-23T18:54:14.072009Z info cache returned workload trust anchor from cache ttl=23h59m59.927991671s 2026-07-23T18:54:14.072383Z info cache returned workload trust anchor from cache ttl=23h59m59.927618317s 2026-07-23T18:54:14.120359Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-07-23T18:54:19.659442Z info Readiness succeeded in 5.879568457s 2026-07-23T18:54:19.659753Z info Envoy proxy is ready 2026-07-23T18:54:33.969734Z info ads ADS: new connection for node:3 2026-07-23T18:54:33.969914Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-07-23T18:54:33.969946Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-07-23T18:56:45.010591Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=26 [2026-07-23T18:56:44.971Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 321 39 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "a9184d0b-1561-4d1a-b971-cd2c18641592" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.132.0.33:8443" outbound|8443||maas-api.odh-ai-gateway-infra.svc.cluster.local 10.134.0.37:47800 10.134.0.37:443 10.132.0.12:45526 - odh-ai-gateway-infra.maas-api-route.3 2026-07-23T18:56:45.118991Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-07-23T18:56:45.786956Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-07-23T18:56:45.083Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 588 35 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "2ad08507-1ef4-4b27-92fe-ba5516393540" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.132.0.33:8443" outbound|8443||maas-api.odh-ai-gateway-infra.svc.cluster.local 10.134.0.37:47812 10.134.0.37:443 10.132.0.12:45528 - odh-ai-gateway-infra.maas-api-route.3 [2026-07-23T18:56:45.174Z] "POST /v1/chat/completions HTTP/1.1" 200 - via_upstream - "-" 122 351 58 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "77daffc0-2f85-427b-a56a-6e4bb292b4d9" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32966 10.134.0.37:443 10.132.0.12:45530 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.274Z] "POST /v1/chat/completions HTTP/1.1" 200 - via_upstream - "-" 122 346 19 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "af0dce44-e568-4fd8-a463-480ac43b7811" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32982 10.134.0.37:443 10.132.0.12:45546 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.326Z] "POST /v1/chat/completions HTTP/1.1" 200 - via_upstream - "-" 122 384 15 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "00ae6b6d-5336-458d-a5b8-67fb901e3140" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32982 10.134.0.37:443 10.132.0.12:45552 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.372Z] "POST /v1/chat/completions HTTP/1.1" 200 - via_upstream - "-" 122 363 15 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "28fb4e7f-65b7-4e8f-a230-97bca3623792" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32966 10.134.0.37:443 10.132.0.12:45554 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.419Z] "POST /v1/chat/completions HTTP/1.1" 200 - via_upstream - "-" 122 390 15 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "97f16e4f-40c7-4731-8aa3-391cc661eecc" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32966 10.134.0.37:443 10.132.0.12:45570 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.462Z] "POST /v1/chat/completions HTTP/1.1" 429 - - "-" 122 18 12 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "f27ed9ce-d436-43d3-b8a4-d49fd987a124" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32966 10.134.0.37:443 10.132.0.12:45576 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.537Z] "POST /v1/chat/completions HTTP/1.1" 429 - - "-" 122 18 11 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "226d1090-7fff-454b-a9db-5552e8ba2195" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32982 10.134.0.37:443 10.132.0.12:45588 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.581Z] "POST /v1/chat/completions HTTP/1.1" 429 - - "-" 122 18 11 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "2fc70e1d-2525-493b-99cd-5dabebd8d088" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local - 10.134.0.37:443 10.132.0.12:45602 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.620Z] "POST /v1/chat/completions HTTP/1.1" 429 - - "-" 122 18 11 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "32d2495d-c0eb-413a-860b-1b4554d1d945" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local - 10.134.0.37:443 10.132.0.12:45610 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.657Z] "POST /v1/chat/completions HTTP/1.1" 429 - - "-" 122 18 11 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "a304fb28-052c-4750-8103-81649b892e5c" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:32998 10.134.0.37:443 10.132.0.12:45612 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.700Z] "POST /v1/chat/completions HTTP/1.1" 429 - - "-" 122 18 12 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "9e1d4acf-a4f3-410e-b40d-5ea1afb8a2ec" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.134.0.47:8000" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local 10.134.0.37:33010 10.134.0.37:443 10.132.0.12:45616 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.740Z] "POST /v1/chat/completions HTTP/1.1" 401 - - "-" 122 0 3 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "8c0210b2-0dfd-4b7d-8793-e3f3450d1cb4" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "-" outbound|8000||facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local - 10.134.0.37:443 10.132.0.12:45628 - llm.facebook-opt-125m-simulated-kserve-route.3 [2026-07-23T18:56:45.772Z] "DELETE /v1/api-keys/1520de29-3425-45af-9b62-3df3cb62a52a HTTP/1.1" 200 - via_upstream - "-" 0 365 14 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "2277316b-0bf6-4238-b5bb-01cf4af4f794" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.132.0.33:8443" outbound|8443||maas-api.odh-ai-gateway-infra.svc.cluster.local 10.134.0.37:47812 10.134.0.37:443 10.132.0.12:45638 - odh-ai-gateway-infra.maas-api-route.3 2026-07-23T18:56:53.308822Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 2026-07-23T18:56:53.347742Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-07-23T18:56:53.306Z] "GET /health HTTP/1.1" 200 - via_upstream - "-" 0 20 2 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "7eba072b-e8b5-4670-a78a-0dc3c6c80b32" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.132.0.33:8443" outbound|8443||maas-api.odh-ai-gateway-infra.svc.cluster.local 10.134.0.37:47812 10.134.0.37:443 10.132.0.12:53442 - odh-ai-gateway-infra.maas-api-route.3 [2026-07-23T18:56:53.336Z] "GET /v1/subscriptions HTTP/1.1" 200 - via_upstream - "-" 0 433 11 - "52.71.36.72,10.132.0.12" "curl/7.76.1" "0f160fa6-9e83-43d6-96bc-6b499d3ac625" "maas.apps.a6d87b39-ac59-4735-9089-a65e12c8c719.prod.konfluxeaas.com" "10.132.0.33:8443" outbound|8443||maas-api.odh-ai-gateway-infra.svc.cluster.local 10.134.0.37:47812 10.134.0.37:443 10.132.0.12:53456 - odh-ai-gateway-infra.maas-api-route.3