2026-11-01T14:22:34.601602Z info FLAG: --concurrency="0" 2026-11-01T14:22:34.601620Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-11-01T14:22:34.601624Z info FLAG: --help="false" 2026-11-01T14:22:34.601627Z info FLAG: --log_as_json="false" 2026-11-01T14:22:34.601628Z info FLAG: --log_caller="" 2026-11-01T14:22:34.601630Z info FLAG: --log_output_level="default:info" 2026-11-01T14:22:34.601632Z info FLAG: --log_stacktrace_level="default:none" 2026-11-01T14:22:34.601636Z info FLAG: --log_target="[stdout]" 2026-11-01T14:22:34.601639Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-11-01T14:22:34.601641Z info FLAG: --outlierLogPath="" 2026-11-01T14:22:34.601643Z info FLAG: --profiling="true" 2026-11-01T14:22:34.601644Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-11-01T14:22:34.601646Z info FLAG: --proxyLogLevel="warning" 2026-11-01T14:22:34.601648Z info FLAG: --serviceCluster="istio-proxy" 2026-11-01T14:22:34.601650Z info FLAG: --stsPort="0" 2026-11-01T14:22:34.601652Z info FLAG: --templateFile="" 2026-11-01T14:22:34.601654Z info FLAG: --tokenManagerPlugin="" 2026-11-01T14:22:34.601656Z info FLAG: --vklog="0" 2026-11-01T14:22:34.601659Z info Version 1.28.10-cebc47d567fd1333707199224c18129ecfe07c05-Clean 2026-11-01T14:22:34.601789Z info Proxy role ips=[10.132.0.39] type=router id=data-science-gateway-data-science-gateway-class-7cfc97f8f7nb8nm.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-11-01T14:22:34.601831Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-11-01T14:22:34.602811Z info cpu limit detected as 2, setting concurrency 2026-11-01T14:22:34.603378Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-11-01T14:22:34.603389Z info JWT policy is third-party-jwt 2026-11-01T14:22:34.603392Z info using credential fetcher of JWT type in cluster.local trust domain 2026-11-01T14:22:34.605207Z info Starting default Istio SDS Server 2026-11-01T14:22:34.605231Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-11-01T14:22:34.605626Z info Opening status port 15020 2026-11-01T14:22:34.605671Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-11-01T14:22:34.606216Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-11-01T14:22:34.606765Z info sds Starting SDS grpc server 2026-11-01T14:22:34.606778Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-11-01T14:22:34.607424Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-11-01T14:22:34.608254Z info Starting proxy agent 2026-11-01T14:22:34.608290Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-11-01T14:22:34.670317Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-11-01T14:22:34.787584Z info ads ADS: new connection for node:1 2026-11-01T14:22:34.788159Z info ads ADS: new connection for node:2 2026-11-01T14:22:34.800316Z info cache generated new workload certificate resourceName=default latency=193.428134ms ttl=23h59m59.199686864s 2026-11-01T14:22:34.800347Z info cache Root cert has changed, start rotating root cert 2026-11-01T14:22:34.800373Z info cache returned workload certificate from cache ttl=23h59m59.199629891s 2026-11-01T14:22:34.800379Z info cache returned workload trust anchor from cache ttl=23h59m59.199621401s 2026-11-01T14:22:34.800474Z info cache returned workload trust anchor from cache ttl=23h59m59.199526171s 2026-11-01T14:22:34.800762Z info cache returned workload trust anchor from cache ttl=23h59m59.199238618s 2026-11-01T14:22:36.150898Z info Readiness succeeded in 1.551416316s 2026-11-01T14:22:36.151323Z info Envoy proxy is ready 2026-11-01T14:24:06.813776Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=2 2026-11-01T14:33:09.776244Z info ads ADS: new connection for node:3 2026-11-01T14:33:09.780144Z info cache adding watcher for file certificate /etc/pki/tls/certs/ca-bundle.crt 2026-11-01T14:33:09.780210Z info cache read certificate from file resource=file-root:system 2026-11-01T14:39:12.711816Z info ads ADS: "" 3 terminated with stream closed 2026-11-01T14:54:42.808477Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=3 2026-11-01T15:18:12.833137Z info ads ADS: new connection for node:4 2026-11-01T15:18:12.838387Z info cache read certificate from file resource=file-root:system 2026-11-01T15:22:13.779834Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=4 2026-11-01T15:27:36.237053Z info ads ADS: "" 4 terminated 2026-11-01T15:27:39.132342Z info ads ADS: new connection for node:5 2026-11-01T15:27:39.138794Z info cache read certificate from file resource=file-root:system 2026-11-01T15:27:44.841706Z info ads ADS: "" 5 terminated with stream closed 2026-11-01T15:27:51.406591Z info ads ADS: new connection for node:6 2026-11-01T15:27:51.414647Z info cache read certificate from file resource=file-root:system 2026-11-01T15:27:57.404142Z info ads ADS: "" 6 terminated 2026-11-01T15:47:50.730269Z info ads ADS: new connection for node:7 2026-11-01T15:47:50.730430Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-01T15:47:50.730461Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-01T15:48:58.816841Z info ads ADS: "" 7 terminated 2026-11-01T15:51:23.069345Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=5 2026-11-01T15:57:04.151520Z info ads ADS: new connection for node:8 2026-11-01T15:57:04.156695Z info cache read certificate from file resource=file-root:system 2026-11-01T15:58:50.107232Z info ads ADS: "" 8 terminated 2026-11-01T15:59:53.877670Z info cache event for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt : REMOVE, pushing to proxy