2021-05-25T14:01:47.693895Z	info	FLAG: --concurrency="2"
2021-05-25T14:01:47.693922Z	info	FLAG: --domain="test-knqk9.svc.cluster.local"
2021-05-25T14:01:47.693927Z	info	FLAG: --help="false"
2021-05-25T14:01:47.693929Z	info	FLAG: --log_as_json="false"
2021-05-25T14:01:47.693931Z	info	FLAG: --log_caller=""
2021-05-25T14:01:47.693934Z	info	FLAG: --log_output_level="default:info"
2021-05-25T14:01:47.693936Z	info	FLAG: --log_rotate=""
2021-05-25T14:01:47.693938Z	info	FLAG: --log_rotate_max_age="30"
2021-05-25T14:01:47.693941Z	info	FLAG: --log_rotate_max_backups="1000"
2021-05-25T14:01:47.693944Z	info	FLAG: --log_rotate_max_size="104857600"
2021-05-25T14:01:47.693948Z	info	FLAG: --log_stacktrace_level="default:none"
2021-05-25T14:01:47.693965Z	info	FLAG: --log_target="[stdout]"
2021-05-25T14:01:47.693970Z	info	FLAG: --meshConfig="./etc/istio/config/mesh"
2021-05-25T14:01:47.693973Z	info	FLAG: --outlierLogPath=""
2021-05-25T14:01:47.693977Z	info	FLAG: --proxyComponentLogLevel="misc:error"
2021-05-25T14:01:47.693981Z	info	FLAG: --proxyLogLevel="warning"
2021-05-25T14:01:47.693985Z	info	FLAG: --serviceCluster="couchbase-operator.test-knqk9"
2021-05-25T14:01:47.693988Z	info	FLAG: --stsPort="0"
2021-05-25T14:01:47.693995Z	info	FLAG: --templateFile=""
2021-05-25T14:01:47.694001Z	info	FLAG: --tokenManagerPlugin="GoogleTokenExchange"
2021-05-25T14:01:47.694007Z	info	Version 1.9.0-b63e1966c245924b10a0915a671a656540ed7a45-Clean
2021-05-25T14:01:47.694204Z	info	Apply proxy config from env {}

2021-05-25T14:01:47.694930Z	info	Effective config: binaryPath: /usr/local/bin/envoy
concurrency: 2
configPath: ./etc/istio/proxy
controlPlaneAuthPolicy: MUTUAL_TLS
discoveryAddress: istiod.istio-system.svc:15012
drainDuration: 45s
parentShutdownDuration: 60s
proxyAdminPort: 15000
serviceCluster: couchbase-operator.test-knqk9
statNameLength: 189
statusPort: 15020
terminationDrainDuration: 5s
tracing:
  zipkin:
    address: zipkin.istio-system:9411

2021-05-25T14:01:47.694954Z	info	Proxy role	ips=[10.212.8.2] type=sidecar id=couchbase-operator-698ffdcfbd-5r9lk.test-knqk9 domain=test-knqk9.svc.cluster.local
2021-05-25T14:01:47.694960Z	info	JWT policy is third-party-jwt
2021-05-25T14:01:47.694972Z	info	Pilot SAN: [istiod.istio-system.svc]
2021-05-25T14:01:47.694984Z	info	CA Endpoint istiod.istio-system.svc:15012, provider Citadel
2021-05-25T14:01:47.695055Z	info	Using CA istiod.istio-system.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem
2021-05-25T14:01:47.695155Z	info	citadelclient	Citadel client using custom root cert: istiod.istio-system.svc:15012
2021-05-25T14:01:47.719259Z	info	ads	All caches have been synced up in 26.807008ms, marking server ready
2021-05-25T14:01:47.719594Z	info	sds	SDS server for workload certificates started, listening on "./etc/istio/proxy/SDS"
2021-05-25T14:01:47.719616Z	info	xdsproxy	Initializing with upstream address "istiod.istio-system.svc:15012" and cluster "Kubernetes"
2021-05-25T14:01:47.719639Z	info	sds	Start SDS grpc server
2021-05-25T14:01:47.719918Z	info	Starting proxy agent
2021-05-25T14:01:47.720104Z	info	Received new config, creating new Envoy epoch 0
2021-05-25T14:01:47.720153Z	info	Epoch 0 starting
2021-05-25T14:01:47.720136Z	info	Opening status port 15020
2021-05-25T14:01:47.731967Z	info	Envoy command: [-c etc/istio/proxy/envoy-rev0.json --restart-epoch 0 --drain-time-s 45 --parent-shutdown-time-s 60 --service-cluster couchbase-operator.test-knqk9 --service-node sidecar~10.212.8.2~couchbase-operator-698ffdcfbd-5r9lk.test-knqk9~test-knqk9.svc.cluster.local --local-address-ip-version v4 --bootstrap-version 3 --log-format %Y-%m-%dT%T.%fZ	%l	envoy %n	%v -l warning --component-log-level misc:error --concurrency 2]
2021-05-25T14:01:47.772000Z	warning	envoy runtime	Unable to use runtime singleton for feature envoy.http.headermap.lazy_map_min_size
2021-05-25T14:01:47.772056Z	warning	envoy runtime	Unable to use runtime singleton for feature envoy.http.headermap.lazy_map_min_size
2021-05-25T14:01:47.772563Z	warning	envoy runtime	Unable to use runtime singleton for feature envoy.http.headermap.lazy_map_min_size
2021-05-25T14:01:47.772606Z	warning	envoy runtime	Unable to use runtime singleton for feature envoy.http.headermap.lazy_map_min_size
2021-05-25T14:01:47.807877Z	info	xdsproxy	connected to upstream XDS server: istiod.istio-system.svc:15012
2021-05-25T14:01:47.832714Z	info	ads	ADS: new connection for node:sidecar~10.212.8.2~couchbase-operator-698ffdcfbd-5r9lk.test-knqk9~test-knqk9.svc.cluster.local-1
2021-05-25T14:01:47.832896Z	info	ads	ADS: new connection for node:sidecar~10.212.8.2~couchbase-operator-698ffdcfbd-5r9lk.test-knqk9~test-knqk9.svc.cluster.local-2
2021-05-25T14:01:47.909246Z	info	cache	Root cert has changed, start rotating root cert
2021-05-25T14:01:47.909287Z	info	ads	XDS: Incremental Pushing:0 ConnectedEndpoints:2 Version:
2021-05-25T14:01:47.909309Z	info	cache	generated new workload certificate	latency=189.711922ms ttl=23h59m59.090700642s
2021-05-25T14:01:47.909357Z	info	cache	returned delayed workload certificate from cache	ttl=23h59m59.09064611s
2021-05-25T14:01:47.909603Z	info	sds	SDS: PUSH	resource=default
2021-05-25T14:01:48.033309Z	info	sds	SDS: PUSH	resource=ROOTCA
2021-05-25T14:01:48.033524Z	info	sds	SDS: PUSH	resource=ROOTCA
2021-05-25T14:01:48.066257Z	warning	envoy filter	mTLS PERMISSIVE mode is used, connection can be either plaintext or TLS, and client cert can be omitted. Please consider to upgrade to mTLS STRICT mode for more secure configuration that only allows TLS connection with client cert. See https://istio.io/docs/tasks/security/mtls-migration/
2021-05-25T14:01:48.068459Z	warning	envoy filter	mTLS PERMISSIVE mode is used, connection can be either plaintext or TLS, and client cert can be omitted. Please consider to upgrade to mTLS STRICT mode for more secure configuration that only allows TLS connection with client cert. See https://istio.io/docs/tasks/security/mtls-migration/
2021-05-25T14:01:48.070419Z	warning	envoy filter	mTLS PERMISSIVE mode is used, connection can be either plaintext or TLS, and client cert can be omitted. Please consider to upgrade to mTLS STRICT mode for more secure configuration that only allows TLS connection with client cert. See https://istio.io/docs/tasks/security/mtls-migration/
2021-05-25T14:01:48.071141Z	warning	envoy filter	mTLS PERMISSIVE mode is used, connection can be either plaintext or TLS, and client cert can be omitted. Please consider to upgrade to mTLS STRICT mode for more secure configuration that only allows TLS connection with client cert. See https://istio.io/docs/tasks/security/mtls-migration/
2021-05-25T14:01:48.073097Z	warning	envoy filter	mTLS PERMISSIVE mode is used, connection can be either plaintext or TLS, and client cert can be omitted. Please consider to upgrade to mTLS STRICT mode for more secure configuration that only allows TLS connection with client cert. See https://istio.io/docs/tasks/security/mtls-migration/
2021-05-25T14:01:48.074593Z	warning	envoy filter	mTLS PERMISSIVE mode is used, connection can be either plaintext or TLS, and client cert can be omitted. Please consider to upgrade to mTLS STRICT mode for more secure configuration that only allows TLS connection with client cert. See https://istio.io/docs/tasks/security/mtls-migration/
2021-05-25T14:01:49.079848Z	info	Initialization took 1.393516995s
2021-05-25T14:01:49.079875Z	info	Envoy proxy is ready
2021-05-25T14:01:49.279853Z	error	Request to probe app failed: Get "http://localhost:8080/readyz": dial tcp 127.0.0.1:8080: connect: connection refused, original URL path = /app-health/couchbase-operator/readyz
app URL path = /readyz