2026-06-05T13:15:29.570348Z info FLAG: --concurrency="0" 2026-06-05T13:15:29.570365Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-05T13:15:29.570369Z info FLAG: --help="false" 2026-06-05T13:15:29.570372Z info FLAG: --log_as_json="false" 2026-06-05T13:15:29.570374Z info FLAG: --log_caller="" 2026-06-05T13:15:29.570376Z info FLAG: --log_output_level="default:info" 2026-06-05T13:15:29.570378Z info FLAG: --log_stacktrace_level="default:none" 2026-06-05T13:15:29.570384Z info FLAG: --log_target="[stdout]" 2026-06-05T13:15:29.570387Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-05T13:15:29.570389Z info FLAG: --outlierLogPath="" 2026-06-05T13:15:29.570391Z info FLAG: --profiling="true" 2026-06-05T13:15:29.570393Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-05T13:15:29.570396Z info FLAG: --proxyLogLevel="warning" 2026-06-05T13:15:29.570398Z info FLAG: --serviceCluster="istio-proxy" 2026-06-05T13:15:29.570400Z info FLAG: --stsPort="0" 2026-06-05T13:15:29.570402Z info FLAG: --templateFile="" 2026-06-05T13:15:29.570404Z info FLAG: --tokenManagerPlugin="" 2026-06-05T13:15:29.570407Z info FLAG: --vklog="0" 2026-06-05T13:15:29.570409Z info Version 1.27.3-f6a985379fd8fe1e5362851fe5c24e3730f643f9-Clean 2026-06-05T13:15:29.570565Z info Proxy role ips=[10.133.0.21] type=router id=maas-default-gateway-openshift-default-687ff6996-sfxfl.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-05T13:15:29.570656Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-05T13:15:29.572030Z info cpu limit detected as 2, setting concurrency 2026-06-05T13:15:29.572468Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-05T13:15:29.572483Z info JWT policy is third-party-jwt 2026-06-05T13:15:29.572492Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-05T13:15:29.575016Z info Starting default Istio SDS Server 2026-06-05T13:15:29.575035Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-05T13:15:29.575006Z info Opening status port 15020 2026-06-05T13:15:29.575052Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-05T13:15:29.575840Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-05T13:15:29.576496Z info sds Starting SDS grpc server 2026-06-05T13:15:29.576589Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-05T13:15:29.577193Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-05T13:15:29.578102Z info Starting proxy agent 2026-06-05T13:15:29.578135Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-05T13:15:29.633657Z warning envoy main external/envoy/source/server/server.cc:901 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-06-05T13:15:29.633998Z warning envoy main external/envoy/source/server/server.cc:997 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-06-05T13:15:29.639583Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-05T13:15:29.678265Z info cache generated new workload certificate resourceName=default latency=101.592351ms ttl=23h59m59.321740134s 2026-06-05T13:15:29.678324Z info cache Root cert has changed, start rotating root cert 2026-06-05T13:15:29.678367Z info cache returned workload trust anchor from cache ttl=23h59m59.321633763s 2026-06-05T13:15:29.727464Z info ads ADS: new connection for node:1 2026-06-05T13:15:29.727538Z info cache returned workload certificate from cache ttl=23h59m59.27246392s 2026-06-05T13:15:29.727935Z info ads ADS: new connection for node:2 2026-06-05T13:15:29.728142Z info cache returned workload trust anchor from cache ttl=23h59m59.271860406s 2026-06-05T13:15:29.774583Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 2026-06-05T13:15:34.776753Z info Readiness succeeded in 5.209002924s 2026-06-05T13:15:34.777029Z info Envoy proxy is ready 2026-06-05T13:16:23.982509Z info ads ADS: new connection for node:3 2026-06-05T13:16:23.982656Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-05T13:16:23.982682Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-05T13:21:22.523124Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-06-05T13:21:22.462Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 61 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "39e0c487-6d0a-4d75-bf08-59f78224eeb3" "maas.apps.23d726ac-b60f-4da9-9932-4dc9a34f1eaa.prod.konfluxeaas.com" "10.132.0.36:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.21:39268 10.133.0.21:443 10.134.0.11:37146 - opendatahub.maas-api-route.1 2026-06-05T13:21:23.375275Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=24 [2026-06-05T13:21:22.568Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 27 806 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "2561393c-d4dc-4060-acd6-5080ac67329a" "maas.apps.23d726ac-b60f-4da9-9932-4dc9a34f1eaa.prod.konfluxeaas.com" "10.132.0.36:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.21:39278 10.133.0.21:443 10.134.0.11:37156 - opendatahub.maas-api-route.1 2026-06-05T13:21:23.430954Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=25 [2026-06-05T13:21:23.416Z] "DELETE /v1/api-keys/290a84fc-62dc-408e-9a5c-830d650f76d5 HTTP/1.1" 200 - via_upstream - "-" 0 334 14 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "3415de04-4cbf-450c-a7a3-7792d9ba3ef9" "maas.apps.23d726ac-b60f-4da9-9932-4dc9a34f1eaa.prod.konfluxeaas.com" "10.132.0.36:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.21:39268 10.133.0.21:443 10.134.0.11:37166 - opendatahub.maas-api-route.1 2026-06-05T13:21:56.048560Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=24 [2026-06-05T13:21:56.034Z] "POST /v1/api-keys HTTP/1.1" 201 - via_upstream - "-" 55 320 14 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "4ca5dfb4-6fa7-41cd-9b9a-bfd309b952f0" "maas.apps.23d726ac-b60f-4da9-9932-4dc9a34f1eaa.prod.konfluxeaas.com" "10.132.0.36:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.21:39278 10.133.0.21:443 10.134.0.11:58674 - opendatahub.maas-api-route.1 2026-06-05T13:21:56.878230Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=24 2026-06-05T13:21:56.931058Z warning envoy wasm external/envoy/source/extensions/common/wasm/context.cc:1152 wasm log openshift-ingress.kuadrant-maas-default-gateway: Missing json property: /usage/total_tokens thread=24 [2026-06-05T13:21:56.091Z] "GET /v1/models HTTP/1.1" 200 - via_upstream - "-" 0 27 787 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "173e72bd-7941-4c48-aafc-d0415e6bf59d" "maas.apps.23d726ac-b60f-4da9-9932-4dc9a34f1eaa.prod.konfluxeaas.com" "10.132.0.36:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.21:39278 10.133.0.21:443 10.134.0.11:58680 - opendatahub.maas-api-route.1 [2026-06-05T13:21:56.917Z] "DELETE /v1/api-keys/6bb9a4d3-c08e-42cb-a614-f086d7c3bd54 HTTP/1.1" 200 - via_upstream - "-" 0 334 13 - "34.228.250.194,10.134.0.11" "curl/7.76.1" "5b6dc5e2-0a9a-4c1c-8e0e-a5f5edd71168" "maas.apps.23d726ac-b60f-4da9-9932-4dc9a34f1eaa.prod.konfluxeaas.com" "10.132.0.36:8443" outbound|8443||maas-api.opendatahub.svc.cluster.local 10.133.0.21:39278 10.133.0.21:443 10.134.0.11:58682 - opendatahub.maas-api-route.1