2026-03-12T08:48:22.085583Z info FLAG: --concurrency="0" 2026-03-12T08:48:22.085676Z info FLAG: --domain="onap.svc.cluster.local" 2026-03-12T08:48:22.085705Z info FLAG: --help="false" 2026-03-12T08:48:22.085725Z info FLAG: --log_as_json="false" 2026-03-12T08:48:22.085743Z info FLAG: --log_caller="" 2026-03-12T08:48:22.085761Z info FLAG: --log_output_level="default:info" 2026-03-12T08:48:22.085779Z info FLAG: --log_stacktrace_level="default:none" 2026-03-12T08:48:22.085835Z info FLAG: --log_target="[stdout]" 2026-03-12T08:48:22.085944Z info FLAG: --meshConfig="./etc/istio/config/mesh" 2026-03-12T08:48:22.086020Z info FLAG: --outlierLogPath="" 2026-03-12T08:48:22.086057Z info FLAG: --profiling="true" 2026-03-12T08:48:22.086134Z info FLAG: --proxyComponentLogLevel="misc:error" 2026-03-12T08:48:22.086158Z info FLAG: --proxyLogLevel="warning" 2026-03-12T08:48:22.086239Z info FLAG: --serviceCluster="istio-proxy" 2026-03-12T08:48:22.086325Z info FLAG: --stsPort="0" 2026-03-12T08:48:22.086353Z info FLAG: --templateFile="" 2026-03-12T08:48:22.086489Z info FLAG: --tokenManagerPlugin="" 2026-03-12T08:48:22.086528Z info FLAG: --vklog="0" 2026-03-12T08:48:22.086601Z info Version 1.24.1-5c178358f9c61c50d3d6149a0b05a609a0d7defd-Clean 2026-03-12T08:48:22.086627Z info Set max file descriptors (ulimit -n) to: 1048576 2026-03-12T08:48:22.087363Z info Proxy role ips=[10.233.67.178] type=sidecar id=onap-cds-command-executor-57b597fbc5-2sx62.onap domain=onap.svc.cluster.local 2026-03-12T08:48:22.087645Z info Apply proxy config from env {} 2026-03-12T08:48:22.095067Z info cpu limit detected as 2, setting concurrency 2026-03-12T08:48:22.095952Z info Effective config: binaryPath: /usr/local/bin/envoy concurrency: 2 configPath: ./etc/istio/proxy controlPlaneAuthPolicy: MUTUAL_TLS discoveryAddress: istiod.istio-system.svc:15012 drainDuration: 45s proxyAdminPort: 15000 serviceCluster: istio-proxy statNameLength: 189 statusPort: 15020 terminationDrainDuration: 5s 2026-03-12T08:48:22.096001Z info JWT policy is third-party-jwt 2026-03-12T08:48:22.096024Z info using credential fetcher of JWT type in cluster.local trust domain 2026-03-12T08:48:22.299681Z info Starting default Istio SDS Server 2026-03-12T08:48:22.299647Z info Opening status port 15020 2026-03-12T08:48:22.299760Z info CA Endpoint istiod.istio-system.svc:15012, provider Citadel 2026-03-12T08:48:22.299807Z info Using CA istiod.istio-system.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 2026-03-12T08:48:22.302043Z info xdsproxy Initializing with upstream address "istiod.istio-system.svc:15012" and cluster "Kubernetes" 2026-03-12T08:48:22.307353Z info Pilot SAN: [istiod.istio-system.svc] 2026-03-12T08:48:22.315485Z info sds Starting SDS grpc server 2026-03-12T08:48:22.317482Z info starting Http service at 127.0.0.1:15004 2026-03-12T08:48:22.317597Z info sds Starting SDS server for workload certificates, will listen on "var/run/secrets/workload-spiffe-uds/socket" 2026-03-12T08:48:22.318676Z info Starting proxy agent 2026-03-12T08:48:22.319320Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields -l warning --component-log-level misc:error --concurrency 2] 2026-03-12T08:48:22.492680Z warning envoy main external/envoy/source/server/server.cc:852 Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `envoy.resource_monitors.global_downstream_max_connections` instead.This runtime key will be removed in future. thread=14 2026-03-12T08:48:22.493786Z warning envoy main external/envoy/source/server/server.cc:948 There is no configured limit to the number of allowed active downstream connections. Configure a limit in `envoy.resource_monitors.global_downstream_max_connections` resource monitor. thread=14 2026-03-12T08:48:22.508887Z info xdsproxy connected to delta upstream XDS server: istiod.istio-system.svc:15012 id=1 2026-03-12T08:48:22.738276Z info ads ADS: new connection for node:1 2026-03-12T08:48:22.739419Z info ads ADS: new connection for node:2 2026-03-12T08:48:22.806035Z info cache generated new workload certificate resourceName=default latency=503.191193ms ttl=23h59m59.193976738s 2026-03-12T08:48:22.806178Z info cache Root cert has changed, start rotating root cert 2026-03-12T08:48:22.806442Z info cache returned workload trust anchor from cache ttl=23h59m59.193569086s 2026-03-12T08:48:22.806569Z info cache returned workload certificate from cache ttl=23h59m59.193438445s 2026-03-12T08:48:22.807164Z info cache returned workload trust anchor from cache ttl=23h59m59.192844661s 2026-03-12T08:48:22.808127Z info cache returned workload trust anchor from cache ttl=23h59m59.191878901s 2026-03-12T08:48:23.640484Z info Readiness succeeded in 1.557575746s 2026-03-12T08:48:23.641339Z info Envoy proxy is ready 2026-03-12T09:18:07.074910Z info xdsproxy connected to delta upstream XDS server: istiod.istio-system.svc:15012 id=2