By type
2026-10-26T06:43:29.966492Z info FLAG: --concurrency="0"
2026-10-26T06:43:29.966556Z info FLAG: --domain="onap.svc.cluster.local"
2026-10-26T06:43:29.966566Z info FLAG: --help="false"
2026-10-26T06:43:29.966573Z info FLAG: --log_as_json="false"
2026-10-26T06:43:29.966578Z info FLAG: --log_caller=""
2026-10-26T06:43:29.966584Z info FLAG: --log_output_level="default:info"
2026-10-26T06:43:29.966589Z info FLAG: --log_stacktrace_level="default:none"
2026-10-26T06:43:29.966609Z info FLAG: --log_target="[stdout]"
2026-10-26T06:43:29.966617Z info FLAG: --meshConfig="./etc/istio/config/mesh"
2026-10-26T06:43:29.966622Z info FLAG: --outlierLogPath=""
2026-10-26T06:43:29.966628Z info FLAG: --profiling="true"
2026-10-26T06:43:29.966633Z info FLAG: --proxyComponentLogLevel="misc:error"
2026-10-26T06:43:29.966640Z info FLAG: --proxyLogLevel="warning"
2026-10-26T06:43:29.966647Z info FLAG: --serviceCluster="istio-proxy"
2026-10-26T06:43:29.966653Z info FLAG: --stsPort="0"
2026-10-26T06:43:29.966660Z info FLAG: --templateFile=""
2026-10-26T06:43:29.966666Z info FLAG: --tokenManagerPlugin=""
2026-10-26T06:43:29.966674Z info FLAG: --vklog="0"
2026-10-26T06:43:29.966682Z info Version 1.24.1-5c178358f9c61c50d3d6149a0b05a609a0d7defd-Clean
2026-10-26T06:43:29.966700Z info Set max file descriptors (ulimit -n) to: 1048576
2026-10-26T06:43:29.967070Z info Proxy role ips=[10.233.67.79] type=sidecar id=onap-authentication-oauth2-proxy-867dccdb4d-9jtxl.onap domain=onap.svc.cluster.local
2026-10-26T06:43:29.967176Z info Apply proxy config from env {}
2026-10-26T06:43:29.970373Z info cpu limit detected as 2, setting concurrency
2026-10-26T06:43:29.970858Z info Effective config: binaryPath: /usr/local/bin/envoy
concurrency: 2
configPath: ./etc/istio/proxy
controlPlaneAuthPolicy: MUTUAL_TLS
discoveryAddress: istiod.istio-system.svc:15012
drainDuration: 45s
proxyAdminPort: 15000
serviceCluster: istio-proxy
statNameLength: 189
statusPort: 15020
terminationDrainDuration: 5s
2026-10-26T06:43:29.970907Z info JWT policy is third-party-jwt
2026-10-26T06:43:29.970941Z info using credential fetcher of JWT type in cluster.local trust domain
2026-10-26T06:43:30.174953Z info Starting default Istio SDS Server
2026-10-26T06:43:30.175015Z info CA Endpoint istiod.istio-system.svc:15012, provider Citadel
2026-10-26T06:43:30.174944Z info Opening status port 15020
2026-10-26T06:43:30.175058Z info Using CA istiod.istio-system.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem
2026-10-26T06:43:30.178505Z info xdsproxy Initializing with upstream address "istiod.istio-system.svc:15012" and cluster "Kubernetes"
2026-10-26T06:43:30.183309Z info Pilot SAN: [istiod.istio-system.svc]
2026-10-26T06:43:30.186314Z info Starting proxy agent
2026-10-26T06:43:30.186435Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --concurrency 2]
2026-10-26T06:43:30.189533Z info sds Starting SDS grpc server
2026-10-26T06:43:30.189623Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket"
2026-10-26T06:43:30.189799Z info starting Http service at 127.0.0.1:15004
2026-10-26T06:43:30.304678Z warning envoy main external/envoy/source/server/server.cc:852 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=12
2026-10-26T06:43:30.306002Z warning envoy main external/envoy/source/server/server.cc:948 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=12
2026-10-26T06:43:30.315249Z info xdsproxy connected to delta upstream XDS server: istiod.istio-system.svc:15012 id=1
2026-10-26T06:43:30.437816Z info cache generated new workload certificate resourceName=default latency=258.739549ms ttl=23h59m59.562200053s
2026-10-26T06:43:30.438018Z info cache Root cert has changed, start rotating root cert
2026-10-26T06:43:30.438134Z info cache returned workload trust anchor from cache ttl=23h59m59.561868974s
2026-10-26T06:43:30.445551Z info ads ADS: new connection for node:1
2026-10-26T06:43:30.446018Z info cache returned workload certificate from cache ttl=23h59m59.554019046s
2026-10-26T06:43:30.446817Z info ads ADS: new connection for node:2
2026-10-26T06:43:30.447736Z info cache returned workload trust anchor from cache ttl=23h59m59.552269603s
2026-10-26T06:43:31.006356Z info Readiness succeeded in 1.042614399s
2026-10-26T06:43:31.007666Z info Envoy proxy is ready
2026-10-26T06:43:34.779777Z error Request to probe app failed: Get "http://10.233.67.79:4180/ready": dial tcp 127.0.0.6:0->10.233.67.79:4180: connect: connection refused, original URL path = /app-health/oauth2-proxy/readyz
app URL path = /ready
2026-10-26T06:43:37.298099Z error Request to probe app failed: Get "http://10.233.67.79:4180/ready": dial tcp 127.0.0.6:0->10.233.67.79:4180: connect: connection refused, original URL path = /app-health/oauth2-proxy/readyz
app URL path = /ready
2026-10-26T06:43:40.803024Z error Request to probe app failed: Get "http://10.233.67.79:4180/ping": dial tcp 127.0.0.6:0->10.233.67.79:4180: connect: connection refused, original URL path = /app-health/oauth2-proxy/livez
app URL path = /ping
2026-10-26T06:43:40.806853Z error Request to probe app failed: Get "http://10.233.67.79:4180/ready": dial tcp 127.0.0.6:0->10.233.67.79:4180: connect: connection refused, original URL path = /app-health/oauth2-proxy/readyz
app URL path = /ready
2026-10-26T06:43:40.835208Z error Request to probe app failed: Get "http://10.233.67.79:4180/ready": dial tcp 127.0.0.6:0->10.233.67.79:4180: connect: connection refused, original URL path = /app-health/oauth2-proxy/readyz
app URL path = /ready
2026-10-26T06:44:02.013101Z error Request to probe app failed: Get "http://10.233.67.79:4180/ready": dial tcp 127.0.0.6:0->10.233.67.79:4180: connect: connection refused, original URL path = /app-health/oauth2-proxy/readyz
app URL path = /ready
2026-10-26T07:14:44.095145Z info xdsproxy connected to delta upstream XDS server: istiod.istio-system.svc:15012 id=2