I0428 12:54:04.704207 1 flags.go:64] FLAG: --add-dir-header="false" I0428 12:54:04.704293 1 flags.go:64] FLAG: --allow-paths="[]" I0428 12:54:04.704301 1 flags.go:64] FLAG: --alsologtostderr="false" I0428 12:54:04.704304 1 flags.go:64] FLAG: --auth-header-fields-enabled="false" I0428 12:54:04.704306 1 flags.go:64] FLAG: --auth-header-groups-field-name="x-remote-groups" I0428 12:54:04.704310 1 flags.go:64] FLAG: --auth-header-groups-field-separator="|" I0428 12:54:04.704313 1 flags.go:64] FLAG: --auth-header-user-field-name="x-remote-user" I0428 12:54:04.704316 1 flags.go:64] FLAG: --auth-token-audiences="[]" I0428 12:54:04.704319 1 flags.go:64] FLAG: --client-ca-file="" I0428 12:54:04.704322 1 flags.go:64] FLAG: --config-file="/etc/kube-rbac-proxy/config-file.yaml" I0428 12:54:04.704325 1 flags.go:64] FLAG: --help="false" I0428 12:54:04.704327 1 flags.go:64] FLAG: --http2-disable="false" I0428 12:54:04.704336 1 flags.go:64] FLAG: --http2-max-concurrent-streams="100" I0428 12:54:04.704342 1 flags.go:64] FLAG: --http2-max-size="262144" I0428 12:54:04.704345 1 flags.go:64] FLAG: --ignore-paths="[]" I0428 12:54:04.704349 1 flags.go:64] FLAG: --insecure-listen-address="" I0428 12:54:04.704352 1 flags.go:64] FLAG: --kube-api-burst="0" I0428 12:54:04.704355 1 flags.go:64] FLAG: --kube-api-qps="0" I0428 12:54:04.704360 1 flags.go:64] FLAG: --kubeconfig="" I0428 12:54:04.704363 1 flags.go:64] FLAG: --log-backtrace-at="" I0428 12:54:04.704365 1 flags.go:64] FLAG: --log-dir="" I0428 12:54:04.704368 1 flags.go:64] FLAG: --log-file="" I0428 12:54:04.704370 1 flags.go:64] FLAG: --log-file-max-size="0" I0428 12:54:04.704373 1 flags.go:64] FLAG: --log-flush-frequency="5s" I0428 12:54:04.704377 1 flags.go:64] FLAG: --logtostderr="true" I0428 12:54:04.704380 1 flags.go:64] FLAG: --oidc-ca-file="" I0428 12:54:04.704383 1 flags.go:64] FLAG: --oidc-clientID="" I0428 12:54:04.704385 1 flags.go:64] FLAG: --oidc-groups-claim="groups" I0428 12:54:04.704387 1 flags.go:64] FLAG: --oidc-groups-prefix="" I0428 12:54:04.704390 1 flags.go:64] FLAG: --oidc-issuer="" I0428 12:54:04.704393 1 flags.go:64] FLAG: --oidc-sign-alg="[RS256]" I0428 12:54:04.704397 1 flags.go:64] FLAG: --oidc-username-claim="email" I0428 12:54:04.704400 1 flags.go:64] FLAG: --oidc-username-prefix="" I0428 12:54:04.704403 1 flags.go:64] FLAG: --one-output="false" I0428 12:54:04.704406 1 flags.go:64] FLAG: --proxy-endpoints-port="0" I0428 12:54:04.704409 1 flags.go:64] FLAG: --secure-listen-address="0.0.0.0:8443" I0428 12:54:04.704412 1 flags.go:64] FLAG: --skip-headers="false" I0428 12:54:04.704414 1 flags.go:64] FLAG: --skip-log-headers="false" I0428 12:54:04.704417 1 flags.go:64] FLAG: --stderrthreshold="" I0428 12:54:04.704419 1 flags.go:64] FLAG: --tls-cert-file="/etc/tls/private/tls.crt" I0428 12:54:04.704422 1 flags.go:64] FLAG: --tls-cipher-suites="[TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305]" I0428 12:54:04.704432 1 flags.go:64] FLAG: --tls-min-version="VersionTLS12" I0428 12:54:04.704435 1 flags.go:64] FLAG: --tls-private-key-file="/etc/tls/private/tls.key" I0428 12:54:04.704438 1 flags.go:64] FLAG: --tls-reload-interval="1m0s" I0428 12:54:04.704467 1 flags.go:64] FLAG: --upstream="http://localhost:8080/" I0428 12:54:04.704471 1 flags.go:64] FLAG: --upstream-ca-file="" I0428 12:54:04.704474 1 flags.go:64] FLAG: --upstream-client-cert-file="" I0428 12:54:04.704477 1 flags.go:64] FLAG: --upstream-client-key-file="" I0428 12:54:04.704481 1 flags.go:64] FLAG: --upstream-force-h2c="false" I0428 12:54:04.704484 1 flags.go:64] FLAG: --v="3" I0428 12:54:04.704488 1 flags.go:64] FLAG: --version="false" I0428 12:54:04.704493 1 flags.go:64] FLAG: --vmodule="" W0428 12:54:04.704504 1 deprecated.go:66] ==== Removed Flag Warning ====================== logtostderr is removed in the k8s upstream and has no effect any more. =============================================== I0428 12:54:04.704514 1 kube-rbac-proxy.go:530] Reading config file: /etc/kube-rbac-proxy/config-file.yaml I0428 12:54:04.705483 1 kube-rbac-proxy.go:233] Valid token audiences: I0428 12:54:04.706877 1 kube-rbac-proxy.go:347] Reading certificate files I0428 12:54:04.707378 1 kube-rbac-proxy.go:395] Starting TCP socket on 0.0.0.0:8443 I0428 12:54:04.707683 1 kube-rbac-proxy.go:402] Listening securely on 0.0.0.0:8443 I0428 12:54:20.338140 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:54:23.804226 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:54:50.324045 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:54:53.794297 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:55:20.324622 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:55:23.794846 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:55:50.324518 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:55:53.794419 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:56:20.324354 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0428 12:56:23.794321 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused