2026-11-01T14:21:33.921523Z info FLAG: --concurrency="0" 2026-11-01T14:21:33.921544Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-11-01T14:21:33.921550Z info FLAG: --help="false" 2026-11-01T14:21:33.921554Z info FLAG: --log_as_json="false" 2026-11-01T14:21:33.921564Z info FLAG: --log_caller="" 2026-11-01T14:21:33.921568Z info FLAG: --log_output_level="default:info" 2026-11-01T14:21:33.921572Z info FLAG: --log_stacktrace_level="default:none" 2026-11-01T14:21:33.921579Z info FLAG: --log_target="[stdout]" 2026-11-01T14:21:33.921590Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-11-01T14:21:33.921593Z info FLAG: --outlierLogPath="" 2026-11-01T14:21:33.921597Z info FLAG: --profiling="true" 2026-11-01T14:21:33.921600Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-11-01T14:21:33.921604Z info FLAG: --proxyLogLevel="warning" 2026-11-01T14:21:33.921613Z info FLAG: --serviceCluster="istio-proxy" 2026-11-01T14:21:33.921617Z info FLAG: --stsPort="0" 2026-11-01T14:21:33.921620Z info FLAG: --templateFile="" 2026-11-01T14:21:33.921623Z info FLAG: --tokenManagerPlugin="" 2026-11-01T14:21:33.921628Z info FLAG: --vklog="0" 2026-11-01T14:21:33.921638Z info Version 1.28.10-cebc47d567fd1333707199224c18129ecfe07c05-Clean 2026-11-01T14:21:33.921820Z info Proxy role ips=[10.132.0.32] type=router id=openshift-ai-inference-openshift-ai-inference-65dccbd94c-bcw96.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-11-01T14:21:33.921898Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-11-01T14:21:33.924258Z info cpu limit detected as 2, setting concurrency 2026-11-01T14:21:33.924575Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-11-01T14:21:33.924590Z info JWT policy is third-party-jwt 2026-11-01T14:21:33.924594Z info using credential fetcher of JWT type in cluster.local trust domain 2026-11-01T14:21:33.926290Z info Opening status port 15020 2026-11-01T14:21:33.926309Z info Starting default Istio SDS Server 2026-11-01T14:21:33.926333Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-11-01T14:21:33.926355Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-11-01T14:21:33.927490Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-11-01T14:21:33.930321Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-11-01T14:21:33.931318Z info Starting proxy agent 2026-11-01T14:21:33.931355Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-11-01T14:21:33.946607Z info sds Starting SDS grpc server 2026-11-01T14:21:33.946662Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-11-01T14:21:34.025020Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-11-01T14:21:34.136501Z info ads ADS: new connection for node:1 2026-11-01T14:21:34.137702Z info ads ADS: new connection for node:2 2026-11-01T14:21:34.393736Z info cache generated new workload certificate resourceName=default latency=464.061392ms ttl=23h59m59.606267668s 2026-11-01T14:21:34.393848Z info cache Root cert has changed, start rotating root cert 2026-11-01T14:21:34.393928Z info cache returned workload trust anchor from cache ttl=23h59m59.606072919s 2026-11-01T14:21:34.393947Z info cache returned workload certificate from cache ttl=23h59m59.606053404s 2026-11-01T14:21:34.394046Z info cache returned workload trust anchor from cache ttl=23h59m59.60595818s 2026-11-01T14:21:34.394443Z info cache returned workload trust anchor from cache ttl=23h59m59.605559514s 2026-11-01T14:21:35.096028Z info Readiness succeeded in 1.17730993s 2026-11-01T14:21:35.096457Z info Envoy proxy is ready 2026-11-01T14:24:06.800358Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=2 2026-11-01T14:33:09.777222Z info ads ADS: new connection for node:3 2026-11-01T14:33:09.780841Z info cache adding watcher for file certificate /etc/pki/tls/certs/ca-bundle.crt 2026-11-01T14:33:09.780881Z info cache read certificate from file resource=file-root:system 2026-11-01T14:39:12.704036Z info ads ADS: "" 3 terminated 2026-11-01T14:54:04.686159Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=3 2026-11-01T14:56:36.110332Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=4 2026-11-01T15:18:12.833474Z info ads ADS: new connection for node:4 2026-11-01T15:18:12.841557Z info cache read certificate from file resource=file-root:system 2026-11-01T15:27:33.567341Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=5 2026-11-01T15:27:36.230420Z info ads ADS: "" 4 terminated with stream closed 2026-11-01T15:27:39.131403Z info ads ADS: new connection for node:5 2026-11-01T15:27:39.137092Z info cache read certificate from file resource=file-root:system 2026-11-01T15:27:44.854577Z info ads ADS: "" 5 terminated with stream closed 2026-11-01T15:27:51.398834Z info ads ADS: new connection for node:6 2026-11-01T15:27:51.404983Z info cache read certificate from file resource=file-root:system 2026-11-01T15:27:57.448869Z info ads ADS: "" 6 terminated 2026-11-01T15:47:50.725811Z info ads ADS: new connection for node:7 2026-11-01T15:47:50.726025Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-01T15:47:50.726070Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-01T15:48:58.804530Z info ads ADS: "" 7 terminated with stream closed 2026-11-01T15:55:02.335758Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=6 2026-11-01T15:57:04.151719Z info ads ADS: new connection for node:8 2026-11-01T15:57:04.156791Z info cache read certificate from file resource=file-root:system 2026-11-01T15:57:55.962153Z info cache event for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt : REMOVE, pushing to proxy 2026-11-01T15:58:50.107412Z info ads ADS: "" 8 terminated with stream closed