I0424 12:20:19.235199 1 flags.go:64] FLAG: --add-dir-header="false" I0424 12:20:19.235361 1 flags.go:64] FLAG: --allow-paths="[]" I0424 12:20:19.235372 1 flags.go:64] FLAG: --alsologtostderr="false" I0424 12:20:19.235375 1 flags.go:64] FLAG: --auth-header-fields-enabled="false" I0424 12:20:19.235377 1 flags.go:64] FLAG: --auth-header-groups-field-name="x-remote-groups" I0424 12:20:19.235381 1 flags.go:64] FLAG: --auth-header-groups-field-separator="|" I0424 12:20:19.235383 1 flags.go:64] FLAG: --auth-header-user-field-name="x-remote-user" I0424 12:20:19.235386 1 flags.go:64] FLAG: --auth-token-audiences="[]" I0424 12:20:19.235390 1 flags.go:64] FLAG: --client-ca-file="" I0424 12:20:19.235392 1 flags.go:64] FLAG: --config-file="/etc/kube-rbac-proxy/config-file.yaml" I0424 12:20:19.235394 1 flags.go:64] FLAG: --help="false" I0424 12:20:19.235396 1 flags.go:64] FLAG: --http2-disable="false" I0424 12:20:19.235397 1 flags.go:64] FLAG: --http2-max-concurrent-streams="100" I0424 12:20:19.235400 1 flags.go:64] FLAG: --http2-max-size="262144" I0424 12:20:19.235402 1 flags.go:64] FLAG: --ignore-paths="[]" I0424 12:20:19.235404 1 flags.go:64] FLAG: --insecure-listen-address="" I0424 12:20:19.235406 1 flags.go:64] FLAG: --kube-api-burst="0" I0424 12:20:19.235409 1 flags.go:64] FLAG: --kube-api-qps="0" I0424 12:20:19.235412 1 flags.go:64] FLAG: --kubeconfig="" I0424 12:20:19.235414 1 flags.go:64] FLAG: --log-backtrace-at="" I0424 12:20:19.235416 1 flags.go:64] FLAG: --log-dir="" I0424 12:20:19.235418 1 flags.go:64] FLAG: --log-file="" I0424 12:20:19.235420 1 flags.go:64] FLAG: --log-file-max-size="0" I0424 12:20:19.235428 1 flags.go:64] FLAG: --log-flush-frequency="5s" I0424 12:20:19.235434 1 flags.go:64] FLAG: --logtostderr="true" I0424 12:20:19.235437 1 flags.go:64] FLAG: --oidc-ca-file="" I0424 12:20:19.235439 1 flags.go:64] FLAG: --oidc-clientID="" I0424 12:20:19.235442 1 flags.go:64] FLAG: --oidc-groups-claim="groups" I0424 12:20:19.235445 1 flags.go:64] FLAG: --oidc-groups-prefix="" I0424 12:20:19.235447 1 flags.go:64] FLAG: --oidc-issuer="" I0424 12:20:19.235449 1 flags.go:64] FLAG: --oidc-sign-alg="[RS256]" I0424 12:20:19.235453 1 flags.go:64] FLAG: --oidc-username-claim="email" I0424 12:20:19.235455 1 flags.go:64] FLAG: --oidc-username-prefix="" I0424 12:20:19.235457 1 flags.go:64] FLAG: --one-output="false" I0424 12:20:19.235459 1 flags.go:64] FLAG: --proxy-endpoints-port="0" I0424 12:20:19.235461 1 flags.go:64] FLAG: --secure-listen-address="0.0.0.0:8443" I0424 12:20:19.235463 1 flags.go:64] FLAG: --skip-headers="false" I0424 12:20:19.235464 1 flags.go:64] FLAG: --skip-log-headers="false" I0424 12:20:19.235466 1 flags.go:64] FLAG: --stderrthreshold="" I0424 12:20:19.235468 1 flags.go:64] FLAG: --tls-cert-file="/etc/tls/private/tls.crt" I0424 12:20:19.235470 1 flags.go:64] FLAG: --tls-cipher-suites="[TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305]" I0424 12:20:19.235475 1 flags.go:64] FLAG: --tls-min-version="VersionTLS12" I0424 12:20:19.235478 1 flags.go:64] FLAG: --tls-private-key-file="/etc/tls/private/tls.key" I0424 12:20:19.235480 1 flags.go:64] FLAG: --tls-reload-interval="1m0s" I0424 12:20:19.235483 1 flags.go:64] FLAG: --upstream="http://localhost:8080/" I0424 12:20:19.235485 1 flags.go:64] FLAG: --upstream-ca-file="" I0424 12:20:19.235487 1 flags.go:64] FLAG: --upstream-client-cert-file="" I0424 12:20:19.235488 1 flags.go:64] FLAG: --upstream-client-key-file="" I0424 12:20:19.235491 1 flags.go:64] FLAG: --upstream-force-h2c="false" I0424 12:20:19.235493 1 flags.go:64] FLAG: --v="3" I0424 12:20:19.235495 1 flags.go:64] FLAG: --version="false" I0424 12:20:19.235498 1 flags.go:64] FLAG: --vmodule="" W0424 12:20:19.235504 1 deprecated.go:66] ==== Removed Flag Warning ====================== logtostderr is removed in the k8s upstream and has no effect any more. =============================================== I0424 12:20:19.235513 1 kube-rbac-proxy.go:532] Reading config file: /etc/kube-rbac-proxy/config-file.yaml I0424 12:20:19.235972 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0424 12:20:19.235989 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0424 12:20:19.235995 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0424 12:20:19.236000 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0424 12:20:19.236120 1 kube-rbac-proxy.go:235] Valid token audiences: I0424 12:20:19.237019 1 kube-rbac-proxy.go:349] Reading certificate files I0424 12:20:19.237279 1 kube-rbac-proxy.go:397] Starting TCP socket on 0.0.0.0:8443 I0424 12:20:19.237468 1 kube-rbac-proxy.go:404] Listening securely on 0.0.0.0:8443 I0424 12:20:37.902337 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:20:51.917887 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:21:21.894888 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:21:37.883764 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:21:51.895139 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:22:07.884486 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:22:21.894790 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:22:37.884762 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused I0424 12:22:51.895508 1 log.go:245] http: proxy error: dial tcp [::1]:8080: connect: connection refused