++ K8S_NODE= ++ [[ -n '' ]] ++ northd_pidfile=/var/run/ovn/ovn-northd.pid ++ controller_pidfile=/var/run/ovn/ovn-controller.pid ++ controller_logfile=/var/log/ovn/acl-audit-log.log ++ vswitch_dbsock=/var/run/openvswitch/db.sock ++ nbdb_pidfile=/var/run/ovn/ovnnb_db.pid ++ nbdb_sock=/var/run/ovn/ovnnb_db.sock ++ nbdb_ctl=/var/run/ovn/ovnnb_db.ctl ++ sbdb_pidfile=/var/run/ovn/ovnsb_db.pid ++ sbdb_sock=/var/run/ovn/ovnsb_db.sock ++ sbdb_ctl=/var/run/ovn/ovnsb_db.ctl + start-rbac-proxy-node ovn-metrics 9105 29105 /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt + local detail=ovn-metrics + local listen_port=9105 + local upstream_port=29105 + local privkey=/etc/pki/tls/metrics-cert/tls.key + local clientcert=/etc/pki/tls/metrics-cert/tls.crt + [[ 5 -ne 5 ]] ++ date -Iseconds + echo '2026-04-25T11:49:27+00:00 INFO: waiting for ovn-metrics certs to be mounted' 2026-04-25T11:49:27+00:00 INFO: waiting for ovn-metrics certs to be mounted + wait-for-certs ovn-metrics /etc/pki/tls/metrics-cert/tls.key /etc/pki/tls/metrics-cert/tls.crt + local detail=ovn-metrics + local privkey=/etc/pki/tls/metrics-cert/tls.key + local clientcert=/etc/pki/tls/metrics-cert/tls.crt + [[ 3 -ne 3 ]] + retries=0 ++ date +%s + TS=1777117767 + WARN_TS=1777118967 + HAS_LOGGED_INFO=0 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117767 + [[ 1777117767 -gt WARN_TS ]] + [[ 0 -eq 0 ]] ++ date -Iseconds + echo '2026-04-25T11:49:27+00:00 INFO: ovn-metrics certs not mounted. Waiting one hour.' + HAS_LOGGED_INFO=1 2026-04-25T11:49:27+00:00 INFO: ovn-metrics certs not mounted. Waiting one hour. + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117772 + [[ 1777117772 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117777 + [[ 1777117777 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117782 + [[ 1777117782 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117787 + [[ 1777117787 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117792 + [[ 1777117792 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117797 + [[ 1777117797 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117802 + [[ 1777117802 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117807 + [[ 1777117807 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117812 + [[ 1777117812 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117817 + [[ 1777117817 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117822 + [[ 1777117822 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117827 + [[ 1777117827 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117832 + [[ 1777117832 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117837 + [[ 1777117837 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117842 + [[ 1777117842 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117847 + [[ 1777117847 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117852 + [[ 1777117852 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117857 + [[ 1777117857 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117862 + [[ 1777117862 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117867 + [[ 1777117867 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117872 + [[ 1777117872 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117877 + [[ 1777117877 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117882 + [[ 1777117882 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117887 + [[ 1777117887 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117892 + [[ 1777117892 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117897 + [[ 1777117897 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117902 + [[ 1777117902 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117907 + [[ 1777117907 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117912 + [[ 1777117912 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117917 + [[ 1777117917 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117922 + [[ 1777117922 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117927 + [[ 1777117927 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117932 + [[ 1777117932 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117937 + [[ 1777117937 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117942 + [[ 1777117942 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117947 + [[ 1777117947 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117952 + [[ 1777117952 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117957 + [[ 1777117957 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117962 + [[ 1777117962 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117967 + [[ 1777117967 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117972 + [[ 1777117972 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117977 + [[ 1777117977 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117982 + [[ 1777117982 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117987 + [[ 1777117987 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117992 + [[ 1777117992 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777117997 + [[ 1777117997 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777118002 + [[ 1777118002 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] ++ date +%s + CUR_TS=1777118007 + [[ 1777118007 -gt WARN_TS ]] + [[ 1 -eq 0 ]] + sleep 5 + [[ ! -f /etc/pki/tls/metrics-cert/tls.key ]] + [[ ! -f /etc/pki/tls/metrics-cert/tls.crt ]] ++ date -Iseconds + echo '2026-04-25T11:53:32+00:00 INFO: ovn-metrics certs mounted, starting kube-rbac-proxy' 2026-04-25T11:53:32+00:00 INFO: ovn-metrics certs mounted, starting kube-rbac-proxy + exec /usr/bin/kube-rbac-proxy --logtostderr --secure-listen-address=:9105 --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 --upstream=http://127.0.0.1:29105/ --tls-private-key-file=/etc/pki/tls/metrics-cert/tls.key --tls-cert-file=/etc/pki/tls/metrics-cert/tls.crt W0425 11:53:32.695074 3504 deprecated.go:66] ==== Removed Flag Warning ====================== logtostderr is removed in the k8s upstream and has no effect any more. =============================================== I0425 11:53:32.696483 3504 kube-rbac-proxy.go:235] Valid token audiences: I0425 11:53:32.697893 3504 kube-rbac-proxy.go:349] Reading certificate files I0425 11:53:32.698302 3504 kube-rbac-proxy.go:397] Starting TCP socket on :9105 I0425 11:53:32.698622 3504 kube-rbac-proxy.go:404] Listening securely on :9105