2026-06-02T05:54:11.964056Z info FLAG: --concurrency="0" 2026-06-02T05:54:11.964086Z info FLAG: --domain="openshift-ingress.svc.cluster.local" 2026-06-02T05:54:11.964090Z info FLAG: --help="false" 2026-06-02T05:54:11.964092Z info FLAG: --log_as_json="false" 2026-06-02T05:54:11.964094Z info FLAG: --log_caller="" 2026-06-02T05:54:11.964097Z info FLAG: --log_output_level="default:info" 2026-06-02T05:54:11.964099Z info FLAG: --log_stacktrace_level="default:none" 2026-06-02T05:54:11.964104Z info FLAG: --log_target="[stdout]" 2026-06-02T05:54:11.964106Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-06-02T05:54:11.964108Z info FLAG: --outlierLogPath="" 2026-06-02T05:54:11.964110Z info FLAG: --profiling="true" 2026-06-02T05:54:11.964112Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-06-02T05:54:11.964114Z info FLAG: --proxyLogLevel="warning" 2026-06-02T05:54:11.964116Z info FLAG: --serviceCluster="istio-proxy" 2026-06-02T05:54:11.964118Z info FLAG: --stsPort="0" 2026-06-02T05:54:11.964120Z info FLAG: --templateFile="" 2026-06-02T05:54:11.964122Z info FLAG: --tokenManagerPlugin="" 2026-06-02T05:54:11.964125Z info FLAG: --vklog="0" 2026-06-02T05:54:11.964128Z info Version 1.26.2-4b1e497cd1c6b51e6a45e6c0abe9aab6bb19e0a8-Clean 2026-06-02T05:54:11.964133Z info Set max file descriptors (ulimit -n) to: 1048576 2026-06-02T05:54:11.964282Z info Proxy role ips=[10.134.0.47] type=router id=maas-default-gateway-openshift-default-7d6f447cf5-45k7n.openshift-ingress domain=openshift-ingress.svc.cluster.local 2026-06-02T05:54:11.964370Z info Apply proxy config from env {"discoveryAddress":"istiod-openshift-gateway.openshift-ingress.svc:15012","proxyHeaders":{"server":{"disabled":true},"envoyDebugHeaders":{"disabled":true},"metadataExchangeHeaders":{"mode":"IN_MESH"}}} 2026-06-02T05:54:11.965642Z info cpu limit detected as 2, setting concurrency 2026-06-02T05:54:11.966247Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod-openshift-gateway.openshift-ingress.svc:15012 drainDuration: 45s proxyAdminPort: 15000 proxyHeaders: envoyDebugHeaders: disabled: true metadataExchangeHeaders: mode: IN_MESH server: disabled: true serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-06-02T05:54:11.966299Z info JWT policy is third-party-jwt 2026-06-02T05:54:11.966304Z info using credential fetcher of JWT type in cluster.local trust domain 2026-06-02T05:54:11.968889Z info Starting default Istio SDS Server 2026-06-02T05:54:11.968915Z info CA Endpoint istiod-openshift-gateway.openshift-ingress.svc:15012, provider Citadel 2026-06-02T05:54:11.968872Z info Opening status port 15020 2026-06-02T05:54:11.968932Z info Using CA istiod-openshift-gateway.openshift-ingress.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-06-02T05:54:11.970046Z info xdsproxy Initializing with upstream address "istiod-openshift-gateway.openshift-ingress.svc:15012" and cluster "Kubernetes" 2026-06-02T05:54:11.971485Z info Pilot SAN: [istiod-openshift-gateway.openshift-ingress.svc] 2026-06-02T05:54:11.972479Z info Starting proxy agent 2026-06-02T05:54:11.972513Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --skip-deprecated-logs --concurrency 2] 2026-06-02T05:54:11.988878Z info sds Starting SDS grpc server 2026-06-02T05:54:11.988921Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-06-02T05:54:12.028836Z warning envoy main external/envoy/source/server/server.cc:874 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=9 2026-06-02T05:54:12.029160Z warning envoy main external/envoy/source/server/server.cc:970 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=9 2026-06-02T05:54:12.035628Z info xdsproxy connected to delta upstream XDS server: istiod-openshift-gateway.openshift-ingress.svc:15012 id=1 2026-06-02T05:54:12.117948Z info ads ADS: new connection for node:1 2026-06-02T05:54:12.118372Z info ads ADS: new connection for node:2 2026-06-02T05:54:12.326770Z info cache generated new workload certificate resourceName=default latency=356.474515ms ttl=23h59m59.673234985s 2026-06-02T05:54:12.326807Z info cache Root cert has changed, start rotating root cert 2026-06-02T05:54:12.326849Z info cache returned workload trust anchor from cache ttl=23h59m59.673152803s 2026-06-02T05:54:12.326868Z info cache returned workload certificate from cache ttl=23h59m59.673131819s 2026-06-02T05:54:12.326953Z info cache returned workload trust anchor from cache ttl=23h59m59.673050972s 2026-06-02T05:54:12.327284Z info cache returned workload trust anchor from cache ttl=23h59m59.672716594s 2026-06-02T05:54:13.727493Z info Readiness succeeded in 1.766226624s 2026-06-02T05:54:13.727883Z info Envoy proxy is ready 2026-06-02T05:56:30.384934Z info wasm fetching image kuadrant/wasm-shim from registry quay.io with tag v0.12.1 [2026-06-02T05:57:11.414Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.4:42298 - - 2026-06-02T05:57:40.348328Z info ads ADS: new connection for node:3 2026-06-02T05:57:40.348463Z info cache adding watcher for file certificate /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt 2026-06-02T05:57:40.348510Z info cache read certificate from file resource=file-root:/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt [2026-06-02T05:58:10.936Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 1986 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:62906 - - [2026-06-02T05:59:34.313Z] "GET / HTTP/1.1" 404 NR route_not_found - "-" 0 0 13 - "100.64.0.4" "Mozilla/1.0" "20f4757d-8f9b-4c7b-9347-a7e03aaf1a74" "50.17.126.225:80" "-" - - 10.134.0.47:80 100.64.0.4:37376 - - [2026-06-02T05:59:55.429Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 476 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.4:39004 - - [2026-06-02T05:59:58.652Z] "GET /.git/config HTTP/1.1" 404 NR route_not_found - "-" 0 0 2 - "100.64.0.2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" "2fd9104c-b516-42f1-a804-314fd0040057" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.2:62838 - - [2026-06-02T05:59:59.341Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 449 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:53136 - - [2026-06-02T06:00:01.012Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 171 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.2:61668 - - [2026-06-02T06:00:04.895Z] "GET /.env.production HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "cd28edcd-373c-45a1-866d-4eb404b6c36d" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.4:23396 - - [2026-06-02T06:00:07.106Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 684 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.4:56128 - - [2026-06-02T06:00:08.755Z] "GET /.env.save HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "671b3b69-2861-474c-b0c9-9c7f8fbefdad" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:45456 - - [2026-06-02T06:00:09.089Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 203 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:8932 - - [2026-06-02T06:00:12.104Z] "GET /wp-config.php.bak HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "8d18f496-98c0-4316-9fe8-1c40c15eec84" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.4:23406 - - [2026-06-02T06:00:14.677Z] "GET /.aws/credentials HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "a65a14c4-da44-4484-a4aa-af6d55a462fe" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:45458 - - [2026-06-02T06:00:16.081Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 146 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.2:16018 - - [2026-06-02T06:00:18.945Z] "GET /phpinfo.php HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.2" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "f3962017-73e7-4255-89be-dbc991d1d940" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.2:61080 - - [2026-06-02T06:00:19.674Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 707 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:8490 - - [2026-06-02T06:00:21.154Z] "GET /server-status HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "764a19df-dc34-4a68-97b1-ea0ac0885084" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.4:25004 - - [2026-06-02T06:00:21.595Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 230 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.2:16034 - - [2026-06-02T06:00:22.637Z] "GET /actuator/env HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "1534535b-76f7-4e93-9ad3-33994461787d" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:23818 - - [2026-06-02T06:00:25.495Z] "GET /.DS_Store HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "db1f6011-edfb-4199-a77e-b23ab268790b" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.2:8568 - - [2026-06-02T06:00:26.039Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 175 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:38850 - - [2026-06-02T06:00:27.147Z] "GET /config.php HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "ff08e6b4-e988-4aa7-9c6c-b1efaf9e92df" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.4:59616 - - [2026-06-02T06:00:23.222Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 4118 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.4:49794 - - [2026-06-02T06:00:27.676Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 121 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.2:14222 - - [2026-06-02T06:00:29.206Z] "GET /app/config/parameters.yml HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" "4b97caa6-aa11-4efd-aebf-34612ca60e98" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:29084 - - [2026-06-02T06:00:31.609Z] "GET /.htpasswd HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.2" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "ade61f3d-a07a-4d3b-a52a-2d09d93713e6" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.2:8576 - - [2026-06-02T06:00:32.010Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 143 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.4:39582 - - [2026-06-02T06:00:32.990Z] "GET /backup.sql HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.4" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "3d7199f5-c878-429f-8dcb-4d9d64cd1550" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.4:59622 - - [2026-06-02T06:00:33.534Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 223 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:38864 - - [2026-06-02T06:00:34.422Z] "GET /dump.sql HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "2476da5f-bf78-4f79-b380-640669902507" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:29100 - - [2026-06-02T06:00:39.732Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 832 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.4:47372 - - [2026-06-02T06:00:41.485Z] "- - -" 0 NR filter_chain_not_found - "-" 0 0 240 - "-" "-" "-" "-" "-" - - 10.134.0.47:443 100.64.0.3:49922 - - [2026-06-02T06:02:37.281Z] "GET / HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" "aa25377e-224d-453f-a6e5-8b19d7303d7f" "54.158.210.199" "-" - - 10.134.0.47:80 100.64.0.3:55002 - - [2026-06-02T06:04:08.633Z] "- - HTTP/1.1" 400 DPE http1.codec_error - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.134.0.47:80 100.64.0.2:19818 - - [2026-06-02T06:04:09.679Z] "- - HTTP/1.1" 400 DPE http1.codec_error - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.134.0.47:80 100.64.0.4:38348 - - [2026-06-02T06:04:10.787Z] "GET / HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "df9d52a4-f5d0-4514-8374-5bc07d2d6cbd" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:3146 - - [2026-06-02T06:04:14.423Z] "- - HTTP/1.1" 400 DPE http1.codec_error - "-" 0 0 0 - "-" "-" "-" "-" "-" - - 10.134.0.47:80 100.64.0.4:19946 - - [2026-06-02T06:04:15.557Z] "GET /security.txt HTTP/1.1" 404 NR route_not_found - "-" 0 0 0 - "100.64.0.3" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "dc9451fd-49a6-412f-a093-408c51b355a3" "50.17.126.225" "-" - - 10.134.0.47:80 100.64.0.3:17516 - -