2026-07-08T17:15:25.555871Z info FLAG: --concurrency="0" 2026-07-08T17:15:25.555890Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-07-08T17:15:25.555894Z info FLAG: --help="false" 2026-07-08T17:15:25.555897Z info FLAG: --log_as_json="false" 2026-07-08T17:15:25.555899Z info FLAG: --log_caller="" 2026-07-08T17:15:25.555901Z info FLAG: --log_output_level="default:info" 2026-07-08T17:15:25.555903Z info FLAG: --log_stacktrace_level="default:none" 2026-07-08T17:15:25.555909Z info FLAG: --log_target="[stdout]" 2026-07-08T17:15:25.555911Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-07-08T17:15:25.555913Z info FLAG: --outlierLogPath="" 2026-07-08T17:15:25.555915Z info FLAG: --profiling="true" 2026-07-08T17:15:25.555918Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-07-08T17:15:25.555920Z info FLAG: --proxyLogLevel="warning" 2026-07-08T17:15:25.555922Z info FLAG: --serviceCluster="istio-proxy" 2026-07-08T17:15:25.555924Z info FLAG: --stsPort="0" 2026-07-08T17:15:25.555927Z info FLAG: --templateFile="" 2026-07-08T17:15:25.555929Z info FLAG: --tokenManagerPlugin="" 2026-07-08T17:15:25.555932Z info FLAG: --vklog="0" 2026-07-08T17:15:25.555934Z info Version 1.27.3-37b7f6000f7028267567a35c7bececc743cce560-Clean 2026-07-08T17:15:25.556082Z info Proxy role ips=[10.132.0.24] type=router id=data-science-gateway-data-science-gateway-class-6576859cf4486hk.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-07-08T17:15:25.556128Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-07-08T17:15:25.558146Z info cpu limit detected as 2, setting concurrency 2026-07-08T17:15:25.558843Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-07-08T17:15:25.558914Z info JWT policy is third-party-jwt 2026-07-08T17:15:25.558940Z info using credential fetcher of JWT type in cluster.local trust domain 2026-07-08T17:15:25.561410Z info Opening status port 15020 2026-07-08T17:15:25.561425Z info Starting default Istio SDS Server 2026-07-08T17:15:25.561451Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-07-08T17:15:25.561476Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-07-08T17:15:25.562707Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-07-08T17:15:25.564231Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-07-08T17:15:25.565242Z info Starting proxy agent 2026-07-08T17:15:25.565286Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-07-08T17:15:25.581002Z info sds Starting SDS grpc server 2026-07-08T17:15:25.581030Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-07-08T17:15:25.625556Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-07-08T17:15:25.625855Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-07-08T17:15:25.634343Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-07-08T17:15:25.726604Z info ads ADS: new connection for node:1 2026-07-08T17:15:25.727049Z info ads ADS: new connection for node:2 2026-07-08T17:15:25.894010Z info cache generated new workload certificate resourceName=default latency=331.129701ms ttl=23h59m59.10599553s 2026-07-08T17:15:25.894054Z info cache Root cert has changed, start rotating root cert 2026-07-08T17:15:25.894102Z info cache returned workload trust anchor from cache ttl=23h59m59.105898927s 2026-07-08T17:15:25.894133Z info cache returned workload certificate from cache ttl=23h59m59.105872511s 2026-07-08T17:15:25.894248Z info cache returned workload trust anchor from cache ttl=23h59m59.105752692s 2026-07-08T17:15:25.894590Z info cache returned workload trust anchor from cache ttl=23h59m59.105411482s 2026-07-08T17:15:26.727786Z info Readiness succeeded in 1.174332771s 2026-07-08T17:15:26.728048Z info Envoy proxy is ready 2026-07-08T17:15:27.431825Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=2 2026-07-08T17:19:36.646661Z info ads ADS: new connection for node:3 2026-07-08T17:19:36.646895Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-07-08T17:19:36.646927Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-07-08T17:35:08.205420Z info ads ADS: new connection for node:4 2026-07-08T17:35:08.207765Z info cache adding watcher for file certificate /etc/pki/tls/certs/ca-bundle.crt 2026-07-08T17:35:08.207807Z info cache read certificate from file resource=file-root:system 2026-07-08T17:35:29.092221Z info ads ADS: "" 4 terminated 2026-07-08T17:45:26.487228Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=3