2026-11-03T17:20:50.787783Z info FLAG: --concurrency="0" 2026-11-03T17:20:50.787820Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-11-03T17:20:50.787827Z info FLAG: --help="false" 2026-11-03T17:20:50.787830Z info FLAG: --log_as_json="false" 2026-11-03T17:20:50.787833Z info FLAG: --log_caller="" 2026-11-03T17:20:50.787845Z info FLAG: --log_output_level="default:info" 2026-11-03T17:20:50.787848Z info FLAG: --log_stacktrace_level="default:none" 2026-11-03T17:20:50.787856Z info FLAG: --log_target="[stdout]" 2026-11-03T17:20:50.787861Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-11-03T17:20:50.787864Z info FLAG: --outlierLogPath="" 2026-11-03T17:20:50.787873Z info FLAG: --profiling="true" 2026-11-03T17:20:50.787877Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-11-03T17:20:50.787880Z info FLAG: --proxyLogLevel="warning" 2026-11-03T17:20:50.787884Z info FLAG: --serviceCluster="istio-proxy" 2026-11-03T17:20:50.787892Z info FLAG: --stsPort="0" 2026-11-03T17:20:50.787895Z info FLAG: --templateFile="" 2026-11-03T17:20:50.787898Z info FLAG: --tokenManagerPlugin="" 2026-11-03T17:20:50.787902Z info FLAG: --vklog="0" 2026-11-03T17:20:50.787907Z info Version 1.28.10-cebc47d567fd1333707199224c18129ecfe07c05-Clean 2026-11-03T17:20:50.788215Z info Proxy role ips=[10.133.0.26] type=router id=openshift-ai-inference-openshift-ai-inference-bc8769f9-95v8w.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-11-03T17:20:50.788300Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-11-03T17:20:50.790929Z info cpu limit detected as 2, setting concurrency 2026-11-03T17:20:50.791649Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-11-03T17:20:50.791717Z info JWT policy is third-party-jwt 2026-11-03T17:20:50.791725Z info using credential fetcher of JWT type in cluster.local trust domain 2026-11-03T17:20:50.793054Z info Starting default Istio SDS Server 2026-11-03T17:20:50.793083Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-11-03T17:20:50.793107Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-11-03T17:20:50.793306Z info Opening status port 15020 2026-11-03T17:20:50.794459Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-11-03T17:20:50.796991Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-11-03T17:20:50.799791Z info Starting proxy agent 2026-11-03T17:20:50.799911Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-11-03T17:20:50.800577Z info sds Starting SDS grpc server 2026-11-03T17:20:50.800645Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-11-03T17:20:50.909745Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-11-03T17:20:51.020160Z info ads ADS: new connection for node:1 2026-11-03T17:20:51.021633Z info ads ADS: new connection for node:2 2026-11-03T17:20:51.101369Z info cache generated new workload certificate resourceName=default latency=305.264513ms ttl=23h59m59.898651294s 2026-11-03T17:20:51.101415Z info cache Root cert has changed, start rotating root cert 2026-11-03T17:20:51.101467Z info cache returned workload trust anchor from cache ttl=23h59m59.89853385s 2026-11-03T17:20:51.101494Z info cache returned workload certificate from cache ttl=23h59m59.89850734s 2026-11-03T17:20:51.101586Z info cache returned workload trust anchor from cache ttl=23h59m59.898417021s 2026-11-03T17:20:51.101989Z info cache returned workload trust anchor from cache ttl=23h59m59.898012865s 2026-11-03T17:20:52.156956Z info Readiness succeeded in 1.372863448s 2026-11-03T17:20:52.157285Z info Envoy proxy is ready 2026-11-03T17:23:19.595704Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=2 2026-11-03T17:36:17.581780Z info ads ADS: new connection for node:3 2026-11-03T17:36:17.601544Z info cache adding watcher for file certificate /etc/pki/tls/certs/ca-bundle.crt 2026-11-03T17:36:17.601600Z info cache read certificate from file resource=file-root:system 2026-11-03T17:53:21.261217Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=3 2026-11-03T17:58:40.633337Z info ads ADS: "" 3 terminated 2026-11-03T17:58:54.559027Z info ads ADS: new connection for node:4 2026-11-03T17:58:54.570277Z info cache read certificate from file resource=file-root:system 2026-11-03T17:59:48.399347Z info ads ADS: "" 4 terminated 2026-11-03T17:59:50.762676Z info ads ADS: new connection for node:5 2026-11-03T17:59:50.768086Z info cache read certificate from file resource=file-root:system 2026-11-03T18:13:21.342245Z info ads ADS: "" 5 terminated 2026-11-03T18:13:35.671936Z info ads ADS: new connection for node:6 2026-11-03T18:13:35.675552Z info cache read certificate from file resource=file-root:system 2026-11-03T18:14:24.520590Z info ads ADS: "" 6 terminated with stream closed 2026-11-03T18:14:27.787438Z info ads ADS: new connection for node:7 2026-11-03T18:14:27.794316Z info cache read certificate from file resource=file-root:system 2026-11-03T18:14:33.742012Z info ads ADS: "" 7 terminated with stream closed 2026-11-03T18:14:40.342749Z info ads ADS: new connection for node:8 2026-11-03T18:14:40.350072Z info cache read certificate from file resource=file-root:system 2026-11-03T18:14:46.432190Z info ads ADS: "" 8 terminated with stream closed 2026-11-03T18:14:49.200617Z info ads ADS: new connection for node:9 2026-11-03T18:14:49.204389Z info cache read certificate from file resource=file-root:system 2026-11-03T18:14:55.298863Z info ads ADS: "" 9 terminated with stream closed 2026-11-03T18:14:59.908529Z info ads ADS: new connection for node:10 2026-11-03T18:14:59.914926Z info cache read certificate from file resource=file-root:system 2026-11-03T18:16:18.094073Z info ads ADS: "" 10 terminated with stream closed 2026-11-03T18:16:26.466643Z info ads ADS: new connection for node:11 2026-11-03T18:16:26.480934Z info cache read certificate from file resource=file-root:system 2026-11-03T18:21:42.624731Z info ads ADS: new connection for node:12 2026-11-03T18:21:42.624871Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T18:21:42.624898Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T18:24:25.239607Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=4 2026-11-03T18:25:56.922318Z info ads ADS: "" 12 terminated 2026-11-03T18:26:53.153381Z info ads ADS: "" 11 terminated 2026-11-03T18:31:36.967858Z info ads ADS: new connection for node:13 2026-11-03T18:31:36.968069Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-11-03T18:32:50.546222Z info ads ADS: "" 13 terminated 2026-11-03T18:42:50.065765Z info ads ADS: new connection for node:14 2026-11-03T18:42:50.071209Z info cache read certificate from file resource=file-root:system 2026-11-03T18:44:26.938048Z info ads ADS: "" 14 terminated with stream closed 2026-11-03T18:52:01.433327Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=5 2026-11-03T18:57:24.452289Z info cache event for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt : REMOVE, pushing to proxy