Now using project "default" on server "https://api.ci-op-yrfqx4vr-3c8f3.cspilp.interop.ccitredhat.com:6443". Fetching istioctl from https://github.com/istio/istio/releases/download/1.26.2/istioctl-1.26.2-linux-amd64.tar.gz istioctl extracted to /go/src/github.com/openshift-service-mesh/sail-operator/bin GINKGO_FLAGS="-v --keep-going --label-filter=smoke&&!cert-manager" /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/integ-suite-ocp.sh + echo 'Running integration tests' Running integration tests + '[' -z /tmp/secret/kubeconfig ']' + KUBECONFIG=/tmp/secret/kubeconfig + ./tests/e2e/common-operator-integ-suite.sh --ocp Running on OCP Skipping build Skipping deploy Setting Istio manifest file: chart/samples/istio-sample.yaml Validating OpenShift cluster operators are stable... All cluster operators are stable. go: downloading github.com/onsi/ginkgo/v2 v2.24.0 go: downloading go.uber.org/automaxprocs v1.6.0 go: downloading golang.org/x/tools v0.36.0 go: downloading github.com/Masterminds/semver/v3 v3.4.0 go: downloading github.com/google/pprof v0.0.0-20250607225305-033d6d78b36a go: downloading github.com/go-task/slim-sprig/v3 v3.0.0 go: downloading github.com/Masterminds/semver v1.5.0 2026/02/24 04:01:43 maxprocs: Leaving GOMAXPROCS=16: CPU quota undefined go: downloading k8s.io/api v0.34.1 go: downloading k8s.io/apimachinery v0.34.1 go: downloading github.com/onsi/gomega v1.38.0 go: downloading sigs.k8s.io/controller-runtime v0.22.3 go: downloading github.com/go-logr/logr v1.4.3 go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0 go: downloading github.com/openshift-service-mesh/istio v0.0.0-20251029174156-37b7f6000f70 go: downloading golang.org/x/sys v0.35.0 go: downloading k8s.io/apiextensions-apiserver v0.34.1 go: downloading k8s.io/client-go v0.34.1 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/google/go-cmp v0.7.0 go: downloading github.com/evanphx/json-patch/v5 v5.9.11 go: downloading k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 go: downloading github.com/evanphx/json-patch v5.9.11+incompatible go: downloading github.com/gogo/protobuf v1.3.2 go: downloading sigs.k8s.io/randfill v1.0.0 go: downloading k8s.io/klog/v2 v2.130.1 go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.0 go: downloading github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.4.0 go: downloading istio.io/client-go v1.27.3 go: downloading golang.org/x/net v0.43.0 go: downloading sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 go: downloading k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b go: downloading gopkg.in/inf.v0 v0.9.1 go: downloading github.com/json-iterator/go v1.1.12 go: downloading go.yaml.in/yaml/v2 v2.4.2 go: downloading istio.io/api v1.27.2-0.20251010085937-bc3692c751f3 go: downloading sigs.k8s.io/yaml v1.6.0 go: downloading golang.org/x/text v0.28.0 go: downloading github.com/google/gnostic-models v0.7.0 go: downloading go.yaml.in/yaml/v3 v3.0.4 go: downloading github.com/go-openapi/jsonreference v0.21.0 go: downloading github.com/go-openapi/swag v0.23.1 go: downloading github.com/prometheus/client_golang v1.23.0 go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go: downloading github.com/fxamacker/cbor/v2 v2.9.0 go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go: downloading github.com/spf13/pflag v1.0.7 go: downloading golang.org/x/term v0.34.0 go: downloading google.golang.org/protobuf v1.36.7 go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc go: downloading github.com/google/btree v1.1.3 go: downloading golang.org/x/sync v0.16.0 go: downloading golang.org/x/time v0.12.0 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/go-openapi/jsonpointer v0.21.1 go: downloading github.com/fsnotify/fsnotify v1.9.0 go: downloading github.com/mailru/easyjson v0.9.0 go: downloading golang.org/x/oauth2 v0.30.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 go: downloading github.com/prometheus/common v0.65.0 go: downloading github.com/prometheus/client_model v0.6.2 go: downloading github.com/beorn7/perks v1.0.1 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/prometheus/procfs v0.17.0 go: downloading github.com/josharian/intern v1.0.0 go: downloading gopkg.in/evanphx/json-patch.v4 v4.12.0 go: downloading github.com/emicklei/go-restful/v3 v3.12.2 go: downloading github.com/golang/protobuf v1.5.4 go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20250811230008-5f3141c8851a go: downloading github.com/pkg/errors v0.9.1 go: downloading gopkg.in/natefinch/lumberjack.v2 v2.2.1 go: downloading go.uber.org/zap v1.27.0 go: downloading github.com/spf13/cobra v1.9.1 go: downloading google.golang.org/grpc v1.74.2 go: downloading go.uber.org/multierr v1.11.0 2026-02-24T04:02:12.709482Z info loading supported istio versions from versions.ossm.yaml ************ Running Setup ************ Initializing k8s client Running Suite: Ambient Test Suite - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient ============================================================================================================= Random Seed: 1771905703 Will run 45 of 45 specs ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the IstioCNI CR is created with ambient profile deploys the CNI DaemonSet [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:86 IstioCNI YAML: apiVersion: sailoperator.io/v1 kind: IstioCNI metadata: name: default spec: values: cni: ambient: dnsCapture: true profile: ambient version: v1.27.3 namespace: istio-cni * IstioCNI created * CNI DaemonSet is deployed in the namespace and Running • [19.931 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the IstioCNI CR is created with ambient profile uses the configured values in the istio-cni-config config map [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:96 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the Istio CR is created with ambient profile updates the Istio CR status to Reconciled [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:121 Istio YAML: apiVersion: sailoperator.io/v1 kind: Istio metadata: name: default spec: version: v1.27.3 namespace: istio-system values: pilot: trustedZtunnelNamespace: ztunnel profile: ambient * Istio CR created * Istio CR is Reconciled • [1.393 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the Istio CR is created with ambient profile updates the Istio CR status to Ready [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:127 * Istio CR is Ready • [7.479 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the Istio CR is created with ambient profile deploys istiod [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:133 * Istiod is deployed in the namespace and Running • [1.070 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the Istio CR is created with ambient profile uses the correct image [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:140 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the Istio CR is created with ambient profile has istiod with appropriate env variables set [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:145 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the ZTunnel CR is created deploys the ZTunnel DaemonSet [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:183 ZTunnel YAML: apiVersion: sailoperator.io/v1 kind: ZTunnel metadata: name: default spec: version: v1.27.3 namespace: ztunnel values: ztunnel: env: CUSTOM_ENV_VAR: "true" * ZTunnel created * ZTunnel DaemonSet is deployed and Running • [7.761 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the ZTunnel CR is created has ztunnel running with appropriate env variables set [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:194 • [0.060 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when sample apps are deployed in the cluster updates the status of pods to Running [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:236 * Ambient validation pods deployed * Pods are ready • [8.371 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when sample apps are deployed in the cluster has the ztunnel proxy sockets configured in the pod network namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:244 • [0.845 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when sample apps are deployed in the cluster can access the httpbin service from the sleep pod [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:248 • [0.848 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the Istio CR is deleted removes everything from the namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:259 * Istio CR deleted * Namespace is empty • [1.690 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the IstioCNI CR is deleted removes everything from the CNI namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:273 * IstioCNI deleted * CNI namespace is empty • [3.004 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.27.3 when the ZTunnel CR is deleted removes everything from the ztunnel namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:288 * ZTunnel deleted * ztunnel namespace is empty STEP: Cleaning up the httpbin Namespace @ 02/24/26 04:03:09.453 STEP: Cleaning up the istio-cni Namespace @ 02/24/26 04:03:09.515 STEP: Cleaning up the istio-system Namespace @ 02/24/26 04:03:09.578 STEP: Cleaning up the sleep Namespace @ 02/24/26 04:03:09.641 STEP: Cleaning up the ztunnel Namespace @ 02/24/26 04:03:09.705 STEP: Waiting for resources to be deleted @ 02/24/26 04:03:09.768 * Finished cleaning up resources • [19.936 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the IstioCNI CR is created with ambient profile deploys the CNI DaemonSet [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:86 IstioCNI YAML: apiVersion: sailoperator.io/v1 kind: IstioCNI metadata: name: default spec: values: cni: ambient: dnsCapture: true profile: ambient version: v1.26.6 namespace: istio-cni * IstioCNI created * CNI DaemonSet is deployed in the namespace and Running • [12.416 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the IstioCNI CR is created with ambient profile uses the configured values in the istio-cni-config config map [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:96 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the Istio CR is created with ambient profile updates the Istio CR status to Reconciled [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:121 Istio YAML: apiVersion: sailoperator.io/v1 kind: Istio metadata: name: default spec: version: v1.26.6 namespace: istio-system values: pilot: trustedZtunnelNamespace: ztunnel profile: ambient * Istio CR created * Istio CR is Reconciled • [1.384 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the Istio CR is created with ambient profile updates the Istio CR status to Ready [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:127 * Istio CR is Ready • [7.486 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the Istio CR is created with ambient profile deploys istiod [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:133 * Istiod is deployed in the namespace and Running • [1.051 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the Istio CR is created with ambient profile uses the correct image [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:140 • [0.060 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the Istio CR is created with ambient profile has istiod with appropriate env variables set [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:145 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the ZTunnel CR is created deploys the ZTunnel DaemonSet [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:183 ZTunnel YAML: apiVersion: sailoperator.io/v1 kind: ZTunnel metadata: name: default spec: version: v1.26.6 namespace: ztunnel values: ztunnel: env: CUSTOM_ENV_VAR: "true" * ZTunnel created * ZTunnel DaemonSet is deployed and Running • [13.049 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the ZTunnel CR is created has ztunnel running with appropriate env variables set [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:194 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when sample apps are deployed in the cluster updates the status of pods to Running [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:236 * Ambient validation pods deployed * Pods are ready • [5.117 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when sample apps are deployed in the cluster has the ztunnel proxy sockets configured in the pod network namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:244 • [0.835 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when sample apps are deployed in the cluster can access the httpbin service from the sleep pod [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:248 • [0.863 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the Istio CR is deleted removes everything from the namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:259 * Istio CR deleted * Namespace is empty • [1.685 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the IstioCNI CR is deleted removes everything from the CNI namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:273 * IstioCNI deleted * CNI namespace is empty • [1.981 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.26.6 when the ZTunnel CR is deleted removes everything from the ztunnel namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:288 * ZTunnel deleted * ztunnel namespace is empty STEP: Cleaning up the httpbin Namespace @ 02/24/26 04:04:15.436 STEP: Cleaning up the istio-cni Namespace @ 02/24/26 04:04:15.5 STEP: Cleaning up the istio-system Namespace @ 02/24/26 04:04:15.562 STEP: Cleaning up the sleep Namespace @ 02/24/26 04:04:15.626 STEP: Cleaning up the ztunnel Namespace @ 02/24/26 04:04:15.689 STEP: Waiting for resources to be deleted @ 02/24/26 04:04:15.752 * Finished cleaning up resources • [16.477 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the IstioCNI CR is created with ambient profile deploys the CNI DaemonSet [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:86 IstioCNI YAML: apiVersion: sailoperator.io/v1 kind: IstioCNI metadata: name: default spec: values: cni: ambient: dnsCapture: true profile: ambient version: v1.24.6 namespace: istio-cni * IstioCNI created * CNI DaemonSet is deployed in the namespace and Running • [10.280 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the IstioCNI CR is created with ambient profile uses the configured values in the istio-cni-config config map [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:96 • [0.060 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the Istio CR is created with ambient profile updates the Istio CR status to Reconciled [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:121 Istio YAML: apiVersion: sailoperator.io/v1 kind: Istio metadata: name: default spec: version: v1.24.6 namespace: istio-system values: pilot: trustedZtunnelNamespace: ztunnel profile: ambient * Istio CR created * Istio CR is Reconciled • [1.399 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the Istio CR is created with ambient profile updates the Istio CR status to Ready [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:127 * Istio CR is Ready • [8.541 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the Istio CR is created with ambient profile deploys istiod [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:133 * Istiod is deployed in the namespace and Running • [1.058 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the Istio CR is created with ambient profile uses the correct image [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:140 • [0.060 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the Istio CR is created with ambient profile has istiod with appropriate env variables set [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:145 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the ZTunnel CR is created deploys the ZTunnel DaemonSet [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:183 ZTunnel YAML: apiVersion: sailoperator.io/v1 kind: ZTunnel metadata: name: default spec: version: v1.24.6 namespace: ztunnel values: ztunnel: env: CUSTOM_ENV_VAR: "true" * ZTunnel created * ZTunnel DaemonSet is deployed and Running • [10.934 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the ZTunnel CR is created has ztunnel running with appropriate env variables set [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:194 • [0.059 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when sample apps are deployed in the cluster updates the status of pods to Running [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:236 * Ambient validation pods deployed * Pods are ready • [5.263 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when sample apps are deployed in the cluster has the ztunnel proxy sockets configured in the pod network namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:244 • [0.852 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when sample apps are deployed in the cluster can access the httpbin service from the sleep pod [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:248 • [0.856 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the Istio CR is deleted removes everything from the namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:259 * Istio CR deleted * Namespace is empty • [1.692 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the IstioCNI CR is deleted removes everything from the CNI namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:273 * IstioCNI deleted * CNI namespace is empty • [1.941 seconds] ------------------------------ Ambient configuration for supported versions Istio version 1.24.6 when the ZTunnel CR is deleted removes everything from the ztunnel namespace [smoke, ambient] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/ambient/ambient_test.go:288 * ZTunnel deleted * ztunnel namespace is empty STEP: Cleaning up the httpbin Namespace @ 02/24/26 04:05:14.939 STEP: Cleaning up the istio-cni Namespace @ 02/24/26 04:05:15.001 STEP: Cleaning up the istio-system Namespace @ 02/24/26 04:05:15.065 STEP: Cleaning up the sleep Namespace @ 02/24/26 04:05:15.127 STEP: Cleaning up the ztunnel Namespace @ 02/24/26 04:05:15.19 STEP: Waiting for resources to be deleted @ 02/24/26 04:05:15.252 * Finished cleaning up resources • [16.449 seconds] ------------------------------ [ReportAfterSuite] Autogenerated ReportAfterSuite for --junit-report autogenerated by Ginkgo [ReportAfterSuite] PASSED [0.003 seconds] ------------------------------ Ran 45 of 45 Specs in 194.654 seconds SUCCESS! -- 45 Passed | 0 Failed | 0 Pending | 0 Skipped PASS 2026-02-24T04:05:27.418691Z info loading supported istio versions from versions.ossm.yaml ************ Running Setup ************ Initializing k8s client Running Suite: Cert Manager Test Suite - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/cert-manager ======================================================================================================================= Random Seed: 1771905703 Will run 0 of 18 specs SSSSSSSSSSSSSSSSSS ------------------------------ [ReportAfterSuite] Autogenerated ReportAfterSuite for --junit-report autogenerated by Ginkgo [ReportAfterSuite] PASSED [0.001 seconds] ------------------------------ Ran 0 of 18 Specs in 0.000 seconds SUCCESS! -- 0 Passed | 0 Failed | 0 Pending | 18 Skipped PASS 2026-02-24T04:05:27.438967Z info loading supported istio versions from versions.ossm.yaml ************ Running Setup ************ Initializing k8s client Running Suite: Control Plane Test Suite - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane ======================================================================================================================== Random Seed: 1771905703 Will run 47 of 59 specs SSSSSSSSSSSS ------------------------------ Control Plane Installation defaulting IstioCNI no spec [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:51 * IstioCNI created [FAILED] in [It] - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:65 @ 02/24/26 04:05:28.14 The test run has failures and the debug information is as follows: =====Operator Deployment YAML=====: apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-02-24T03:56:00Z" generation: 1 labels: app.kubernetes.io/component: sail-operator app.kubernetes.io/created-by: servicemeshoperator3 app.kubernetes.io/instance: servicemesh-operator3 app.kubernetes.io/managed-by: helm app.kubernetes.io/name: deployment app.kubernetes.io/part-of: servicemeshoperator3 control-plane: servicemesh-operator3 olm.deployment-spec-hash: buE8Ji5HzUIQCWGlISehVHZUQrs0h4LEEuvZb4 olm.managed: "true" olm.owner: servicemeshoperator3.v3.2.2 olm.owner.kind: ClusterServiceVersion olm.owner.namespace: openshift-operators operators.coreos.com/servicemeshoperator3.openshift-operators: "" name: servicemesh-operator3 namespace: openshift-operators ownerReferences: - apiVersion: operators.coreos.com/v1alpha1 blockOwnerDeletion: false controller: false kind: ClusterServiceVersion name: servicemeshoperator3.v3.2.2 uid: 17646cc5-54d9-41d5-bce2-2b0cd982beac resourceVersion: "33353" uid: 84b2062d-9b28-46d0-b84f-1348f8e8558c spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 1 selector: matchLabels: app.kubernetes.io/created-by: servicemeshoperator3 app.kubernetes.io/part-of: servicemeshoperator3 control-plane: servicemesh-operator3 strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 25% type: RollingUpdate template: metadata: annotations: alm-examples: |- [ { "apiVersion": "sailoperator.io/v1", "kind": "Istio", "metadata": { "name": "default" }, "spec": { "namespace": "istio-system", "updateStrategy": { "inactiveRevisionDeletionGracePeriodSeconds": 30, "type": "InPlace" }, "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "IstioCNI", "metadata": { "name": "default" }, "spec": { "namespace": "istio-cni", "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "ZTunnel", "metadata": { "name": "default" }, "spec": { "namespace": "ztunnel", "version": "v1.27.3" } } ] capabilities: Seamless Upgrades categories: OpenShift Optional, Integration & Delivery, Networking, Security containerImage: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 createdAt: "2026-01-27T14:22:23Z" description: The OpenShift Service Mesh Operator enables you to install, configure, and manage an instance of Red Hat OpenShift Service Mesh. OpenShift Service Mesh is based on the open source Istio project. features.operators.openshift.io/cnf: "false" features.operators.openshift.io/cni: "true" features.operators.openshift.io/csi: "false" features.operators.openshift.io/disconnected: "true" features.operators.openshift.io/fips-compliant: "true" features.operators.openshift.io/proxy-aware: "false" features.operators.openshift.io/tls-profiles: "false" features.operators.openshift.io/token-auth-aws: "false" features.operators.openshift.io/token-auth-azure: "false" features.operators.openshift.io/token-auth-gcp: "false" images.v1_24_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2b60b0f33affda8b5b2cc30a4b09b2198b053fb1a914d386d35fcf03c09234e6 images.v1_24_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a020acb4a74040df03077924e10465454092f6c34a902b391fba55563c08f826 images.v1_24_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f592b91a6f28559abdf6546ff6c3ae70a44d8f811592746e9eb02cdb2e5dec9d images.v1_24_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:17db00a219de14e5901b5a5eca64d3c6684ca74c1dba3ae3b03787c655fe9c80 images.v1_24_4.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:54cada48e5c9824f255f82daa2ef5bea236919e521d3ea49885f2883ced2b7bc images.v1_24_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:87b967785d7cc222f9df9cb49f0373a9819bf67910ce523dc3b8345849e881dd images.v1_24_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7fa655f5efb1175ff1e1c138371fc1233e5d4313c5feb07194428d0d1fdd33a3 images.v1_24_5.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:7ea9b82e192402566e69063a4787351be9f1ef50719bfd1a8f5d5940362b3f70 images.v1_24_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0183bcce17e39308d1ceb8f4e7a88923f037f738b342e9673406cc2c44b525ac images.v1_24_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0d8d08879a9af334b1ebb345c58bbd395cbfa77646552485329919e3bd075465 images.v1_24_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5e1509e1746653b00125c540258d0eed2397ff74745f2d4854ca7e27f0e109ed images.v1_24_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:adcd26b9b64462153973ea1103f1c23c68012af315d804705be9ad927c89f7ff images.v1_24_6.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:2514a14cdec51d4570bed5678624d9406539842607bc52bbc98f3de40308f986 images.v1_26_2.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:14c5a52faf20267baa43d9a72ee6416f56fbc41dd640adc2aba3c4043802a0e9 images.v1_26_2.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:028e10651db0d1ddb769a27c9483c6d41be6ac597f253afd9d599f395d9c82d8 images.v1_26_2.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:366266f10e658c4cea86bddf6ee847e1908ea4dd780cb5f7fb0e466bac8995f1 images.v1_26_2.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:d518f3d1539f45e1253c5c9fa22062802804601d4998cd50344e476a3cc388fe images.v1_26_2.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:ecc6a22a471f4f4b836648f3a72ea7f57a4ea960ebcbc7dbe3fe729500902d0b images.v1_26_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2ea112ab90b8540f11e9949d77c3e7e3b3ef57ac3bf23f6cf1e883a88430e1f9 images.v1_26_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:33feac0c9c888b375e207e86b3f9a1a289126ca46b64632a7f693e2191cfbbfd images.v1_26_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2ca96716812d339775d3dfd396c863834dd3810720e98bfcf87bc67c5fbd29b5 images.v1_26_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:26747627ae22bbdffcf9de58077454fc0c890cda83659d7834b15dea2b5aaaf2 images.v1_26_3.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f7ab868455b5e887e2d89b7078678531290365f9166cae99ce56119f31fa2ba4 images.v1_26_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:9536c5850961488b3e01e29140d9ace0cbaa1f4bd1c1860cb49d10bf0514a5bf images.v1_26_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:02b82941a92c537233c4f60d9223da2e637b045189b8700dd7030bd9c1c352d5 images.v1_26_4.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:cadc30c15a54d89de1992624a3641c7d5951dd292b668d026ab9d5e2f3878a77 images.v1_26_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b45ecae5a9240b40403c4e39c6a81ab66c8c7e8de194dc3e21b1336ff3a0fa38 images.v1_26_4.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:950e9a2e8fef8740b4909957c2cced52d45abd66324fb056097f2d0782970573 images.v1_26_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:be16b9a7e2693bf294c99d96ba4cf36e98629ebff2ce6f2ce946fd9ae1e9f2dc images.v1_26_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91229b8d6e932178ddddf0b4878114b65c0451755919996239d1fe6285b644e8 images.v1_26_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8a21e30593e51f2fd2e51d9ab1d0ed2fc43eaa9b98173d7fb74f799d6b2f163d images.v1_26_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:47100186c27934adeda3002bb04cac28980ca8854eee7d6e4f4b3f85562e9a8e images.v1_26_6.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f39e2c28ef36fce9f808f3946cc4e4126047e142ad84cb18c222cecceae29730 images.v1_26_8.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:dd02b94ca8e81ad0d0177f187cc7e67a52d58856f92e92bc4a71ab3f3723fd1f images.v1_26_8.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e59864113e84cdf5f14d93229af720a1a3ab85b6e2ece8e0477079ab62a14068 images.v1_26_8.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d607fea2f3f03ba269b90fcaa53f1a0e696113236e125da5be142cbcf89ae4cf images.v1_26_8.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b17a2794ec7b94f5c67ac7b6b230b9a699d0eadef0bc35ede58b17df64aa26fc images.v1_26_8.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:9f7b28f8c92b59715f9e1d0b7b463ae870fab5899c2332c53542ec5021541a78 images.v1_27_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ddadd677161ad8c1077dd156821d6b4e32742ccbb210e9c14696fa66a58c0867 images.v1_27_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0850242436e88f7d82f0f2126de064c7e0f09844f31d8ff0f53dc8d3908075d9 images.v1_27_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:742bc084c26769ff57cb3aa47b7a35c2b94684c3f67a9388da07a0490a942e5c images.v1_27_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7d15cebf9b62f3f235c0eab5158ac8ff2fda86a1d193490dc94c301402c99da8 images.v1_27_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:b2b3216a05f6136ed9ddb71d72d493030c6d6b431682dddffa692c760b6c9ba1 images.v1_27_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806 images.v1_27_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2e515a40de141bd4e516bfcf4fd0cbb8d236ac02799a7a35d77ae44f53916bc9 images.v1_27_5.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d1baba8cb454b62d804dc427d4ccfea928348631c384d1ab3d170e1e2a9d1178 images.v1_27_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:650da1e2ad1cb93e6a0231dba7ca1f27f4cccac84e5925135281adc629a0caea images.v1_27_5.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ae2919cd446e0e1f0a21d0850e7809ba8f44c06d484c023b3bee2787ca4bdd0 kubectl.kubernetes.io/default-container: sail-operator olm.operatorGroup: global-operators olm.operatorNamespace: openshift-operators olm.targetNamespaces: "" operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"extensions.istio.io","kind":"WasmPlugin","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"DestinationRule","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"DestinationRule","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"DestinationRule","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"EnvoyFilter","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Gateway","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Gateway","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Gateway","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ProxyConfig","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ServiceEntry","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ServiceEntry","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ServiceEntry","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Sidecar","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Sidecar","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Sidecar","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"VirtualService","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"VirtualService","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"VirtualService","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadEntry","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadEntry","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadEntry","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadGroup","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadGroup","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadGroup","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"Istio","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"IstioCNI","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"IstioRevision","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"IstioRevisionTag","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"ZTunnel","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"ZTunnel","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"AuthorizationPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"AuthorizationPolicy","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"PeerAuthentication","version":"v1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"PeerAuthentication","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"RequestAuthentication","version":"v1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"RequestAuthentication","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"telemetry.istio.io","kind":"Telemetry","version":"v1"}},{"type":"olm.gvk","value":{"group":"telemetry.istio.io","kind":"Telemetry","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"servicemeshoperator3","version":"3.2.2"}}]}' operators.openshift.io/valid-subscription: '["OpenShift Container Platform", "OpenShift Platform Plus"]' operators.operatorframework.io/builder: operator-sdk-v1.41.1 operators.operatorframework.io/internal-objects: '["wasmplugins.extensions.istio.io","destinationrules.networking.istio.io","envoyfilters.networking.istio.io","gateways.networking.istio.io","proxyconfigs.networking.istio.io","serviceentries.networking.istio.io","sidecars.networking.istio.io","virtualservices.networking.istio.io","workloadentries.networking.istio.io","workloadgroups.networking.istio.io","authorizationpolicies.security.istio.io","peerauthentications.security.istio.io","requestauthentications.security.istio.io","telemetries.telemetry.istio.io"]' operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/istio-ecosystem/sail-operator support: Red Hat, Inc. labels: app.kubernetes.io/created-by: servicemeshoperator3 app.kubernetes.io/part-of: servicemeshoperator3 control-plane: servicemesh-operator3 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: kubernetes.io/arch operator: In values: - amd64 - arm64 - ppc64le - s390x - key: kubernetes.io/os operator: In values: - linux containers: - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --zap-log-level=info command: - /usr/local/bin/sail-operator env: - name: OPERATOR_CONDITION_NAME value: servicemeshoperator3.v3.2.2 image: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: sail-operator readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 1Gi requests: cpu: 10m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/sail-operator name: operator-config readOnly: true dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true serviceAccount: servicemesh-operator3 serviceAccountName: servicemesh-operator3 terminationGracePeriodSeconds: 10 volumes: - downwardAPI: defaultMode: 420 items: - fieldRef: apiVersion: v1 fieldPath: metadata.annotations path: config.properties name: operator-config status: availableReplicas: 1 conditions: - lastTransitionTime: "2026-02-24T03:56:19Z" lastUpdateTime: "2026-02-24T03:56:19Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-02-24T03:56:00Z" lastUpdateTime: "2026-02-24T03:56:19Z" message: ReplicaSet "servicemesh-operator3-5968d78df4" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 1 replicas: 1 updatedReplicas: 1 =====Operator logs=====: 2026-02-24T04:03:29Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "3fd0dea3-9ae9-4b80-9ed9-dd3bd1c033ca"} 2026-02-24T04:03:29Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "70652e04-dc82-4b21-ac4b-0cdcbdcce397"} 2026-02-24T04:03:29Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "70652e04-dc82-4b21-ac4b-0cdcbdcce397"} 2026-02-24T04:03:34Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "7e64b8c7-f250-446a-8fc0-3a310398cc0f"} 2026-02-24T04:03:34Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "7e64b8c7-f250-446a-8fc0-3a310398cc0f"} 2026-02-24T04:03:34Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "84657e48-8842-497f-9be9-74da3bac0ad3"} 2026-02-24T04:03:35Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "84657e48-8842-497f-9be9-74da3bac0ad3"} 2026-02-24T04:03:35Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "8eebf5c8-acc9-4982-8e9c-0ca4aa8c2a52"} 2026-02-24T04:03:35Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "8eebf5c8-acc9-4982-8e9c-0ca4aa8c2a52"} 2026-02-24T04:03:35Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "fe3b91ee-e53a-4ec7-973b-4d397010b439"} 2026-02-24T04:03:35Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "fe3b91ee-e53a-4ec7-973b-4d397010b439"} 2026-02-24T04:03:35Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "5bdc2b29-0b80-4299-8376-c2382e1cc33b"} 2026-02-24T04:03:36Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "5bdc2b29-0b80-4299-8376-c2382e1cc33b"} 2026-02-24T04:03:36Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "6df05132-4880-4c23-9c21-7936fde0412f"} 2026-02-24T04:03:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "6df05132-4880-4c23-9c21-7936fde0412f"} 2026-02-24T04:03:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "e095545c-7dac-437e-a1de-9ab64f45dbd5"} 2026-02-24T04:03:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "e095545c-7dac-437e-a1de-9ab64f45dbd5"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "f472be02-dc41-4cc4-b03c-e13405a4e6ca"} 2026-02-24T04:03:38Z INFO ctrlr.istio Creating IstioRevision {"Istio": "default", "reconcileID": "f472be02-dc41-4cc4-b03c-e13405a4e6ca", "IstioRevision": "default"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "f472be02-dc41-4cc4-b03c-e13405a4e6ca"} 2026-02-24T04:03:38Z INFO ctrlr.istiorev Added finalizer {"IstioRevision": "default", "reconcileID": "16bff944-7808-4b7f-9c86-6eb91781ddbf", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:03:38Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "71cc5a84-51a9-4097-aa96-b9aa92cdf1d3"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "047e47c8-d57b-4b02-817b-b6ce1c3a4363"} 2026-02-24T04:03:38Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "047e47c8-d57b-4b02-817b-b6ce1c3a4363", "IstioRevision": "default"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "047e47c8-d57b-4b02-817b-b6ce1c3a4363"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "ad8b05a3-1696-4b48-8c90-98e0c4113dbe"} 2026-02-24T04:03:38Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "ad8b05a3-1696-4b48-8c90-98e0c4113dbe", "IstioRevision": "default"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "ad8b05a3-1696-4b48-8c90-98e0c4113dbe"} 2026-02-24T04:03:38Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "71cc5a84-51a9-4097-aa96-b9aa92cdf1d3"} 2026-02-24T04:03:38Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "e3274100-e408-42be-9bf2-cb264c188583"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "ce979329-3c8c-4b28-b64c-f9854ae750ef"} 2026-02-24T04:03:38Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "ce979329-3c8c-4b28-b64c-f9854ae750ef", "IstioRevision": "default"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "ce979329-3c8c-4b28-b64c-f9854ae750ef"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "66da72e7-6d37-4626-8290-77f79c37018a"} 2026-02-24T04:03:38Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "66da72e7-6d37-4626-8290-77f79c37018a", "IstioRevision": "default"} 2026-02-24T04:03:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "66da72e7-6d37-4626-8290-77f79c37018a"} 2026-02-24T04:03:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "e3274100-e408-42be-9bf2-cb264c188583"} 2026-02-24T04:03:39Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "e8f23fbf-5df5-4bb1-b286-531b7dd73f67"} 2026-02-24T04:03:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "e8f23fbf-5df5-4bb1-b286-531b7dd73f67"} 2026-02-24T04:03:44Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "f06cd44c-8ac6-4722-92bb-4098d1338c72"} 2026-02-24T04:03:45Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "f06cd44c-8ac6-4722-92bb-4098d1338c72"} 2026-02-24T04:03:45Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "8633eec1-8f62-4cc9-a70b-70e11aec241c"} 2026-02-24T04:03:46Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "8633eec1-8f62-4cc9-a70b-70e11aec241c"} 2026-02-24T04:03:46Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "063d2529-3506-4cbe-9980-24224500f872"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "2328af4b-b699-4271-8bd3-42eba46bed98"} 2026-02-24T04:03:46Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "2328af4b-b699-4271-8bd3-42eba46bed98", "IstioRevision": "default"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "2328af4b-b699-4271-8bd3-42eba46bed98"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "1392521f-f6e0-4f39-9efd-5c81a583c0ec"} 2026-02-24T04:03:46Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "1392521f-f6e0-4f39-9efd-5c81a583c0ec", "IstioRevision": "default"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "1392521f-f6e0-4f39-9efd-5c81a583c0ec"} 2026-02-24T04:03:47Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "063d2529-3506-4cbe-9980-24224500f872"} 2026-02-24T04:03:47Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "9b3875e2-d8b7-487d-b52a-75187473b38a"} 2026-02-24T04:03:47Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "9b3875e2-d8b7-487d-b52a-75187473b38a", "IstioRevision": "default"} 2026-02-24T04:03:47Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "a4a56030-a552-4ccb-b9d4-934d250d802e"} 2026-02-24T04:03:47Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "9b3875e2-d8b7-487d-b52a-75187473b38a"} 2026-02-24T04:03:48Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "a4a56030-a552-4ccb-b9d4-934d250d802e"} 2026-02-24T04:03:48Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "b0c7a23a-48e6-4aaa-9c13-d2269000fadc"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Added finalizer {"ztunnel": "default", "reconcileID": "a55a9bb0-7b89-4bfa-bc41-b90731cb0e17", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Conflict while adding finalizer; will retry {"ztunnel": "default", "reconcileID": "0dc1d468-4280-4cf1-8d32-2cbc453e4096", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "84738a20-038e-4c2b-a175-1e1fc51a9829"} 2026-02-24T04:03:48.291500Z info klog Warning: would violate PodSecurity "restricted:latest": seLinuxOptions (container "istio-proxy" set forbidden securityContext.seLinuxOptions: type "spc_t"), allowPrivilegeEscalation != false (container "istio-proxy" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "istio-proxy" must not include "NET_ADMIN", "NET_RAW", "SYS_ADMIN" in securityContext.capabilities.add), restricted volume types (volume "cni-ztunnel-sock-dir" uses restricted volume type "hostPath"), runAsNonRoot != true (container "istio-proxy" must not set securityContext.runAsNonRoot=false), runAsUser=0 (container "istio-proxy" must not set runAsUser=0), seccompProfile (pod or container "istio-proxy" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "84738a20-038e-4c2b-a175-1e1fc51a9829"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "13d6df0f-d158-4d14-bc31-a5ff28202bfa"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "13d6df0f-d158-4d14-bc31-a5ff28202bfa"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "dcfdcb8f-c4f0-42d7-8535-d7e5cd8199e8"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "dcfdcb8f-c4f0-42d7-8535-d7e5cd8199e8"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "b0c7a23a-48e6-4aaa-9c13-d2269000fadc"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "c7f0956a-156a-4860-a4e3-7213af25f6df"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "435945d0-7e71-4752-8bfc-7533fcac9c76"} 2026-02-24T04:03:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "435945d0-7e71-4752-8bfc-7533fcac9c76", "IstioRevision": "default"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "435945d0-7e71-4752-8bfc-7533fcac9c76"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "80e7e8b4-2c7c-4da0-aa8b-22fdea1e763f"} 2026-02-24T04:03:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "80e7e8b4-2c7c-4da0-aa8b-22fdea1e763f", "IstioRevision": "default"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "80e7e8b4-2c7c-4da0-aa8b-22fdea1e763f"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "c7f0956a-156a-4860-a4e3-7213af25f6df"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "288f48dd-e304-49d2-b7a2-b40d6e37acfc"} 2026-02-24T04:03:50Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "55aea182-f0cf-4d84-a17c-e594e1f5a145"} 2026-02-24T04:03:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "55aea182-f0cf-4d84-a17c-e594e1f5a145"} 2026-02-24T04:03:50Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "288f48dd-e304-49d2-b7a2-b40d6e37acfc"} 2026-02-24T04:03:53Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "307354c9-6dde-42b8-905e-5fd9cfaadeb2"} 2026-02-24T04:03:53Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "307354c9-6dde-42b8-905e-5fd9cfaadeb2"} 2026-02-24T04:03:55Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "ce1e99bc-5a56-4bca-a47e-a024edc6820c"} 2026-02-24T04:03:55Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "ce1e99bc-5a56-4bca-a47e-a024edc6820c"} 2026-02-24T04:03:55Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "58f174f0-7eef-46ec-8047-d4f2de6759cc"} 2026-02-24T04:03:56Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "58f174f0-7eef-46ec-8047-d4f2de6759cc"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "405b3943-21c5-400a-9d83-d5eaf86556b2"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "405b3943-21c5-400a-9d83-d5eaf86556b2"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "d5f02970-32e2-4ac4-bd21-dfe1d6a68336"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "d5f02970-32e2-4ac4-bd21-dfe1d6a68336"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "b929ae86-36e2-40e4-a25c-84cbd946c6c6"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "b929ae86-36e2-40e4-a25c-84cbd946c6c6"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "642b6229-a0d6-482a-b943-d85fcbf9a4a6"} 2026-02-24T04:04:00Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "6e396ea2-fbe4-4a39-acfb-01d439f2cc91"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "642b6229-a0d6-482a-b943-d85fcbf9a4a6"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "83e84471-1c1f-42f0-b512-2b6b0bc4662c"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "83e84471-1c1f-42f0-b512-2b6b0bc4662c"} 2026-02-24T04:04:00Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "6e396ea2-fbe4-4a39-acfb-01d439f2cc91"} 2026-02-24T04:04:01Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "12a2daa2-5c31-4bcf-8d2f-e93442ed2ce5"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "90298792-3889-4702-8315-4a9f1ed3200e"} 2026-02-24T04:04:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "90298792-3889-4702-8315-4a9f1ed3200e", "IstioRevision": "default"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "90298792-3889-4702-8315-4a9f1ed3200e"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "cfa795f8-3cdb-460b-9385-6c7778e90808"} 2026-02-24T04:04:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "cfa795f8-3cdb-460b-9385-6c7778e90808", "IstioRevision": "default"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "cfa795f8-3cdb-460b-9385-6c7778e90808"} 2026-02-24T04:04:01Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "12a2daa2-5c31-4bcf-8d2f-e93442ed2ce5"} 2026-02-24T04:04:08Z INFO ctrlr.istiorev Removed finalizer {"IstioRevision": "default", "reconcileID": "0607e07c-be58-4b02-a720-bc481e9407ab", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:08Z INFO ctrlr.istiorev Resource no longer exists; no need to remove finalizer {"IstioRevision": "default", "reconcileID": "ba829306-e4bd-451d-89f5-3bee7fbe7089", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:09Z INFO ctrlr.istiocni Removed finalizer {"IstioCNI": "default", "reconcileID": "3519c56b-4370-44ad-8448-d8ee0b20ec84", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:11Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "df300f5c-095d-4614-91bd-7fa65126f35b"} 2026-02-24T04:04:11Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "df300f5c-095d-4614-91bd-7fa65126f35b"} 2026-02-24T04:04:11Z INFO ctrlr.ztunnel Removed finalizer {"ztunnel": "default", "reconcileID": "d2940cc2-807f-4721-b0f0-82f0e94bcee8", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:30Z INFO ctrlr.istiocni Added finalizer {"IstioCNI": "default", "reconcileID": "2c068b6c-29cf-4820-97c7-374baa094b3d", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:30Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "be2b3344-8062-4c09-b472-4aa661ac2262"} 2026-02-24T04:04:30.800302Z info klog Warning: spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/install-cni]: deprecated since v1.30; use the "appArmorProfile" field instead 2026-02-24T04:04:30.800324Z info klog Warning: would violate PodSecurity "restricted:latest": forbidden AppArmor profile (annotation must not set AppArmor profile type to "container.apparmor.security.beta.kubernetes.io/install-cni="unconfined""), host namespaces (hostNetwork=true), seLinuxOptions (container "install-cni" set forbidden securityContext.seLinuxOptions: type "spc_t"), allowPrivilegeEscalation != false (container "install-cni" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "install-cni" must not include "DAC_OVERRIDE", "NET_ADMIN", "NET_RAW", "SYS_ADMIN", "SYS_PTRACE" in securityContext.capabilities.add), restricted volume types (volumes "cni-bin-dir", "cni-host-procfs", "cni-ztunnel-sock-dir", "cni-net-dir", "cni-socket-dir", "cni-netns-dir" use restricted volume type "hostPath"), runAsNonRoot != true (container "install-cni" must not set securityContext.runAsNonRoot=false), runAsUser=0 (container "install-cni" must not set runAsUser=0), seccompProfile (pod or container "install-cni" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 2026-02-24T04:04:30Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "be2b3344-8062-4c09-b472-4aa661ac2262"} 2026-02-24T04:04:30Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "74710103-9726-4a70-be65-e2e2c9fe1b4c"} 2026-02-24T04:04:31Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "74710103-9726-4a70-be65-e2e2c9fe1b4c"} 2026-02-24T04:04:31Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "8a3a1e4c-a3ab-4a8e-aea6-42ef95463867"} 2026-02-24T04:04:31Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "8a3a1e4c-a3ab-4a8e-aea6-42ef95463867"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "f3673c7c-7182-442b-bae0-526933bb1f37"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "f3673c7c-7182-442b-bae0-526933bb1f37"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "792d6b0a-aae7-4e9b-83c6-35b66323638f"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "792d6b0a-aae7-4e9b-83c6-35b66323638f"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "7e609055-0572-4953-917e-e99b06b091ef"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "7e609055-0572-4953-917e-e99b06b091ef"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "0cd54727-40b5-4ba4-9d9e-22a18b40a442"} 2026-02-24T04:04:38Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "0cd54727-40b5-4ba4-9d9e-22a18b40a442"} 2026-02-24T04:04:38Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "310a9ddd-b292-4b3d-94f0-1c58b838d517"} 2026-02-24T04:04:38Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "310a9ddd-b292-4b3d-94f0-1c58b838d517"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "260a7ed9-45ef-4e94-a5b1-ee9415b39622"} 2026-02-24T04:04:38Z INFO ctrlr.istio Creating IstioRevision {"Istio": "default", "reconcileID": "260a7ed9-45ef-4e94-a5b1-ee9415b39622", "IstioRevision": "default"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "260a7ed9-45ef-4e94-a5b1-ee9415b39622"} 2026-02-24T04:04:38Z INFO ctrlr.istiorev Added finalizer {"IstioRevision": "default", "reconcileID": "9d4c9751-8920-4257-950d-308ca963ca10", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:38Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "70d31042-d774-4a77-b363-f9eca346a92e"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "489834b7-e924-423c-ac66-34d924e0f385"} 2026-02-24T04:04:38Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "489834b7-e924-423c-ac66-34d924e0f385", "IstioRevision": "default"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "489834b7-e924-423c-ac66-34d924e0f385"} 2026-02-24T04:04:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "70d31042-d774-4a77-b363-f9eca346a92e"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "b45eb93e-bf3c-497c-9406-0de92438c2e2"} 2026-02-24T04:04:39Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "b45eb93e-bf3c-497c-9406-0de92438c2e2", "IstioRevision": "default"} 2026-02-24T04:04:39Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "cae8b108-13ce-42bb-afcb-d6456fdbc6e3"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "b45eb93e-bf3c-497c-9406-0de92438c2e2"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "e5df568d-bc1e-4400-aedc-0828bf8e634a"} 2026-02-24T04:04:39Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "e5df568d-bc1e-4400-aedc-0828bf8e634a", "IstioRevision": "default"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "e5df568d-bc1e-4400-aedc-0828bf8e634a"} 2026-02-24T04:04:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "cae8b108-13ce-42bb-afcb-d6456fdbc6e3"} 2026-02-24T04:04:45Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "5e7cfeeb-9159-41c6-9c75-9ff070fbcc76"} 2026-02-24T04:04:46Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "5e7cfeeb-9159-41c6-9c75-9ff070fbcc76"} 2026-02-24T04:04:46Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "d39341a4-872a-4ec4-9469-831e1fdda1db"} 2026-02-24T04:04:47Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "d39341a4-872a-4ec4-9469-831e1fdda1db"} 2026-02-24T04:04:47Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "eff94f87-92e6-4f17-9992-947cada481b4"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "49f383a0-5966-446a-9efd-5cd7749c40f9"} 2026-02-24T04:04:47Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "49f383a0-5966-446a-9efd-5cd7749c40f9", "IstioRevision": "default"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "49f383a0-5966-446a-9efd-5cd7749c40f9"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "b074fa46-6999-4b7d-944e-f921342a8edf"} 2026-02-24T04:04:47Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "b074fa46-6999-4b7d-944e-f921342a8edf", "IstioRevision": "default"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "b074fa46-6999-4b7d-944e-f921342a8edf"} 2026-02-24T04:04:48Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "eff94f87-92e6-4f17-9992-947cada481b4"} 2026-02-24T04:04:48Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "73e9c8c3-31d0-42b7-bc56-ffb27c5cacc4"} 2026-02-24T04:04:48Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "7e7bf2f6-d2c0-4176-96cd-51629d5891d1"} 2026-02-24T04:04:48Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "7e7bf2f6-d2c0-4176-96cd-51629d5891d1", "IstioRevision": "default"} 2026-02-24T04:04:48Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "7e7bf2f6-d2c0-4176-96cd-51629d5891d1"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "73e9c8c3-31d0-42b7-bc56-ffb27c5cacc4"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "5e22f70b-4006-4180-b976-63c3ea037595"} 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Added finalizer {"ztunnel": "default", "reconcileID": "a27d2036-22b8-45e6-aa21-5e9627c30d7e", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "e82068ed-b4cb-4c0d-a413-9a7b7dfeb474"} 2026-02-24T04:04:49.733069Z info klog Warning: would violate PodSecurity "restricted:latest": seLinuxOptions (container "istio-proxy" set forbidden securityContext.seLinuxOptions: type "spc_t"), allowPrivilegeEscalation != false (container "istio-proxy" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "istio-proxy" must not include "NET_ADMIN", "NET_RAW", "SYS_ADMIN" in securityContext.capabilities.add), restricted volume types (volume "cni-ztunnel-sock-dir" uses restricted volume type "hostPath"), runAsNonRoot != true (container "istio-proxy" must not set securityContext.runAsNonRoot=false), runAsUser=0 (container "istio-proxy" must not set runAsUser=0), seccompProfile (pod or container "istio-proxy" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "e82068ed-b4cb-4c0d-a413-9a7b7dfeb474"} 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "8abd4dbe-95aa-4e3a-89e8-146d9c6585d3"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "5e22f70b-4006-4180-b976-63c3ea037595"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "41694585-e709-4148-b86d-12a166cdeec9"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "bb91a933-2e24-4630-937e-5281d5e0a5d4"} 2026-02-24T04:04:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "bb91a933-2e24-4630-937e-5281d5e0a5d4", "IstioRevision": "default"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "bb91a933-2e24-4630-937e-5281d5e0a5d4"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "b0f07248-8bb8-49cc-a434-44ebe65ccfe3"} 2026-02-24T04:04:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "b0f07248-8bb8-49cc-a434-44ebe65ccfe3", "IstioRevision": "default"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "b0f07248-8bb8-49cc-a434-44ebe65ccfe3"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "8abd4dbe-95aa-4e3a-89e8-146d9c6585d3"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "ce9ca287-8811-4a9e-b655-af999745381f"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "ce9ca287-8811-4a9e-b655-af999745381f"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "fd84f2ee-1003-4f9d-bdb4-47ff847f1fb8"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "fd84f2ee-1003-4f9d-bdb4-47ff847f1fb8"} 2026-02-24T04:04:50Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "41694585-e709-4148-b86d-12a166cdeec9"} 2026-02-24T04:04:50Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "7a77268e-bd0a-4a45-9333-6401d8299bad"} 2026-02-24T04:04:51Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "7a77268e-bd0a-4a45-9333-6401d8299bad"} 2026-02-24T04:04:58Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "3be06b77-bc3c-45b8-96ef-a3f3ab47a7cb"} 2026-02-24T04:04:58Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "3be06b77-bc3c-45b8-96ef-a3f3ab47a7cb"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "3c0f8dee-f2c8-4519-88cf-6c54b29450ed"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "3c0f8dee-f2c8-4519-88cf-6c54b29450ed"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "f20c9117-c832-4c43-b539-c77eb8fc4a86"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "f20c9117-c832-4c43-b539-c77eb8fc4a86"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "21478a3e-5941-4c14-92bf-fbe3b18eaee2"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "21478a3e-5941-4c14-92bf-fbe3b18eaee2"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "23baf85f-eef5-490f-b46a-7f08a87e4f61"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "23baf85f-eef5-490f-b46a-7f08a87e4f61"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "c8d4711c-b69c-4a81-a2b8-c89e5445d1de"} 2026-02-24T04:05:00Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "99d5fd18-c218-4202-8717-d63b9c7c043f"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "c8d4711c-b69c-4a81-a2b8-c89e5445d1de"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "4384ea02-2295-4acd-89f4-ba5f618c0019"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "4384ea02-2295-4acd-89f4-ba5f618c0019"} 2026-02-24T04:05:01Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "99d5fd18-c218-4202-8717-d63b9c7c043f"} 2026-02-24T04:05:01Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "459570fe-29fb-42f4-9970-b1aa1b4dfde9"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "e3c6a960-2b45-44df-88b3-9168254e0196"} 2026-02-24T04:05:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "e3c6a960-2b45-44df-88b3-9168254e0196", "IstioRevision": "default"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "e3c6a960-2b45-44df-88b3-9168254e0196"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "f7a380fa-784b-4b02-bb84-a8ee2a226604"} 2026-02-24T04:05:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "f7a380fa-784b-4b02-bb84-a8ee2a226604", "IstioRevision": "default"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "f7a380fa-784b-4b02-bb84-a8ee2a226604"} 2026-02-24T04:05:02Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "459570fe-29fb-42f4-9970-b1aa1b4dfde9"} 2026-02-24T04:05:06Z INFO controller-runtime.cache Warning: sailoperator.io/v1alpha1 ZTunnel is deprecated; use sailoperator.io/v1 ZTunnel 2026-02-24T04:05:08Z INFO ctrlr.istiorev Removed finalizer {"IstioRevision": "default", "reconcileID": "2dfc450a-0cc8-4699-8f26-18a5da73bb4e", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:09Z INFO ctrlr.istiocni Removed finalizer {"IstioCNI": "default", "reconcileID": "5d51c8b3-c4fe-4e31-85c2-b54128eb58d3", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:09Z INFO ctrlr.istiocni Resource no longer exists; no need to remove finalizer {"IstioCNI": "default", "reconcileID": "26b4aa4f-8e1b-4816-8be3-fb36d85bd420", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "b782a8c4-6836-4e23-baf3-25d83a0fa287"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "b782a8c4-6836-4e23-baf3-25d83a0fa287"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Removed finalizer {"ztunnel": "default", "reconcileID": "d978b4a8-441e-45ea-b5d9-ffaf4cd76700", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Resource no longer exists; no need to remove finalizer {"ztunnel": "default", "reconcileID": "15e8b5f0-ac78-43ce-a973-6ac20ae73a06", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Added finalizer {"IstioCNI": "default", "reconcileID": "39c63a06-a2ea-4c55-a44f-4fce59266d90", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "4f612bc6-8c3c-49a1-80c7-9ccb9eb1eb85"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Validation failed {"IstioCNI": "default", "reconcileID": "4f612bc6-8c3c-49a1-80c7-9ccb9eb1eb85", "error": "validation error: namespace \"istio-cni\" doesn't exist"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "e5d0f0af-569e-4e89-8846-fdb7befcb3fd"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Validation failed {"IstioCNI": "default", "reconcileID": "e5d0f0af-569e-4e89-8846-fdb7befcb3fd", "error": "validation error: namespace \"istio-cni\" doesn't exist"} =====Events in openshift-operators=====: LAST SEEN TYPE REASON OBJECT MESSAGE 9m14s Warning AppliedWithWarnings installplan/install-vwwpq 1 warning(s) generated during installation of operator "servicemeshoperator3.v3.2.2" (CustomResourceDefinition "virtualservices.networking.istio.io"): unrecognized format "binary" 9m10s Warning AppliedWithWarnings installplan/install-vwwpq 1 warning(s) generated during installation of operator "servicemeshoperator3.v3.2.2" (CustomResourceDefinition "ztunnels.sailoperator.io"): sailoperator.io/v1alpha1 ZTunnel is deprecated; use sailoperator.io/v1 ZTunnel 8m45s Normal Scheduled pod/kiali-operator-7ffb966b85-7nmfn Successfully assigned openshift-operators/kiali-operator-7ffb966b85-7nmfn to ip-10-0-31-248.us-west-2.compute.internal 8m45s Normal AddedInterface pod/kiali-operator-7ffb966b85-7nmfn Add eth0 [10.129.2.12/23] from ovn-kubernetes 8m45s Normal Pulling pod/kiali-operator-7ffb966b85-7nmfn Pulling image "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:80527410292ccafbdc84527576e2fc1f9a0abd7154e2235f06de33f9861570ee" 8m35s Normal Pulled pod/kiali-operator-7ffb966b85-7nmfn Successfully pulled image "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:80527410292ccafbdc84527576e2fc1f9a0abd7154e2235f06de33f9861570ee" in 9.959s (9.959s including waiting). Image size: 756671885 bytes. 8m35s Normal Created pod/kiali-operator-7ffb966b85-7nmfn Created container: operator 8m35s Normal Started pod/kiali-operator-7ffb966b85-7nmfn Started container operator 8m46s Normal SuccessfulCreate replicaset/kiali-operator-7ffb966b85 Created pod: kiali-operator-7ffb966b85-7nmfn 8m46s Normal ScalingReplicaSet deployment/kiali-operator Scaled up replica set kiali-operator-7ffb966b85 from 0 to 1 8m46s Normal RequirementsUnknown clusterserviceversion/kiali-operator.v2.17.4 requirements not yet checked 8m46s Normal RequirementsNotMet clusterserviceversion/kiali-operator.v2.17.4 one or more requirements couldn't be found 8m46s Normal AllRequirementsMet clusterserviceversion/kiali-operator.v2.17.4 all requirements found, attempting install 8m46s Normal InstallSucceeded clusterserviceversion/kiali-operator.v2.17.4 waiting for install components to report healthy 8m46s Normal InstallWaiting clusterserviceversion/kiali-operator.v2.17.4 installing: waiting for deployment kiali-operator to become ready: deployment "kiali-operator" not available: Deployment does not have minimum availability. 7m55s Normal InstallSucceeded clusterserviceversion/kiali-operator.v2.17.4 install strategy completed with no errors 9m23s Normal LeaderElection lease/sail-operator-lock servicemesh-operator3-5968d78df4-b78r2_098875c7-642f-4943-8a03-1ab7eec0d93b became leader 9m28s Normal Scheduled pod/servicemesh-operator3-5968d78df4-b78r2 Successfully assigned openshift-operators/servicemesh-operator3-5968d78df4-b78r2 to ip-10-0-31-248.us-west-2.compute.internal 9m28s Normal AddedInterface pod/servicemesh-operator3-5968d78df4-b78r2 Add eth0 [10.129.2.10/23] from ovn-kubernetes 9m28s Normal Pulling pod/servicemesh-operator3-5968d78df4-b78r2 Pulling image "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743" 9m23s Normal Pulled pod/servicemesh-operator3-5968d78df4-b78r2 Successfully pulled image "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743" in 4.599s (4.599s including waiting). Image size: 170475461 bytes. 9m23s Normal Created pod/servicemesh-operator3-5968d78df4-b78r2 Created container: sail-operator 9m23s Normal Started pod/servicemesh-operator3-5968d78df4-b78r2 Started container sail-operator 9m28s Normal SuccessfulCreate replicaset/servicemesh-operator3-5968d78df4 Created pod: servicemesh-operator3-5968d78df4-b78r2 9m29s Normal ScalingReplicaSet deployment/servicemesh-operator3 Scaled up replica set servicemesh-operator3-5968d78df4 from 0 to 1 9m33s Normal RequirementsUnknown clusterserviceversion/servicemeshoperator3.v3.2.2 requirements not yet checked 9m30s Normal RequirementsNotMet clusterserviceversion/servicemeshoperator3.v3.2.2 one or more requirements couldn't be found 9m29s Normal AllRequirementsMet clusterserviceversion/servicemeshoperator3.v3.2.2 all requirements found, attempting install 9m29s Normal InstallSucceeded clusterserviceversion/servicemeshoperator3.v3.2.2 waiting for install components to report healthy 9m28s Normal InstallWaiting clusterserviceversion/servicemeshoperator3.v3.2.2 installing: waiting for deployment servicemesh-operator3 to become ready: waiting for spec update of deployment "servicemesh-operator3" to be observed... 9m28s Normal InstallWaiting clusterserviceversion/servicemeshoperator3.v3.2.2 installing: waiting for deployment servicemesh-operator3 to become ready: deployment "servicemesh-operator3" not available: Deployment does not have minimum availability. 9m10s Normal InstallSucceeded clusterserviceversion/servicemeshoperator3.v3.2.2 install strategy completed with no errors =====Pods in openshift-operators=====: NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES kiali-operator-7ffb966b85-7nmfn 1/1 Running 0 8m46s 10.129.2.12 ip-10-0-31-248.us-west-2.compute.internal servicemesh-operator3-5968d78df4-b78r2 1/1 Running 0 9m28s 10.129.2.10 ip-10-0-31-248.us-west-2.compute.internal =====Operator Deployment describe=====: Name: servicemesh-operator3 Namespace: openshift-operators CreationTimestamp: Tue, 24 Feb 2026 03:56:00 +0000 Labels: app.kubernetes.io/component=sail-operator app.kubernetes.io/created-by=servicemeshoperator3 app.kubernetes.io/instance=servicemesh-operator3 app.kubernetes.io/managed-by=helm app.kubernetes.io/name=deployment app.kubernetes.io/part-of=servicemeshoperator3 control-plane=servicemesh-operator3 olm.deployment-spec-hash=buE8Ji5HzUIQCWGlISehVHZUQrs0h4LEEuvZb4 olm.managed=true olm.owner=servicemeshoperator3.v3.2.2 olm.owner.kind=ClusterServiceVersion olm.owner.namespace=openshift-operators operators.coreos.com/servicemeshoperator3.openshift-operators= Annotations: deployment.kubernetes.io/revision: 1 Selector: app.kubernetes.io/created-by=servicemeshoperator3,app.kubernetes.io/part-of=servicemeshoperator3,control-plane=servicemesh-operator3 Replicas: 1 desired | 1 updated | 1 total | 1 available | 0 unavailable StrategyType: RollingUpdate MinReadySeconds: 0 RollingUpdateStrategy: 25% max unavailable, 25% max surge Pod Template: Labels: app.kubernetes.io/created-by=servicemeshoperator3 app.kubernetes.io/part-of=servicemeshoperator3 control-plane=servicemesh-operator3 Annotations: alm-examples: [ { "apiVersion": "sailoperator.io/v1", "kind": "Istio", "metadata": { "name": "default" }, "spec": { "namespace": "istio-system", "updateStrategy": { "inactiveRevisionDeletionGracePeriodSeconds": 30, "type": "InPlace" }, "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "IstioCNI", "metadata": { "name": "default" }, "spec": { "namespace": "istio-cni", "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "ZTunnel", "metadata": { "name": "default" }, "spec": { "namespace": "ztunnel", "version": "v1.27.3" } } ] capabilities: Seamless Upgrades categories: OpenShift Optional, Integration & Delivery, Networking, Security containerImage: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 createdAt: 2026-01-27T14:22:23Z description: The OpenShift Service Mesh Operator enables you to install, configure, and manage an instance of Red Hat OpenShift Service Mesh. OpenShift... features.operators.openshift.io/cnf: false features.operators.openshift.io/cni: true features.operators.openshift.io/csi: false features.operators.openshift.io/disconnected: true features.operators.openshift.io/fips-compliant: true features.operators.openshift.io/proxy-aware: false features.operators.openshift.io/tls-profiles: false features.operators.openshift.io/token-auth-aws: false features.operators.openshift.io/token-auth-azure: false features.operators.openshift.io/token-auth-gcp: false images.v1_24_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2b60b0f33affda8b5b2cc30a4b09b2198b053fb1a914d386d35fcf03c09234e6 images.v1_24_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a020acb4a74040df03077924e10465454092f6c34a902b391fba55563c08f826 images.v1_24_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f592b91a6f28559abdf6546ff6c3ae70a44d8f811592746e9eb02cdb2e5dec9d images.v1_24_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:17db00a219de14e5901b5a5eca64d3c6684ca74c1dba3ae3b03787c655fe9c80 images.v1_24_4.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:54cada48e5c9824f255f82daa2ef5bea236919e521d3ea49885f2883ced2b7bc images.v1_24_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:87b967785d7cc222f9df9cb49f0373a9819bf67910ce523dc3b8345849e881dd images.v1_24_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7fa655f5efb1175ff1e1c138371fc1233e5d4313c5feb07194428d0d1fdd33a3 images.v1_24_5.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:7ea9b82e192402566e69063a4787351be9f1ef50719bfd1a8f5d... images.v1_24_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0183bcce17e39308d1ceb8f4e7a88923f037f738b342e9673406cc2c44b525ac images.v1_24_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0d8d08879a9af334b1ebb345c58bbd395cbfa77646552485329919e3bd075465 images.v1_24_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5e1509e1746653b00125c540258d0eed2397ff74745f2d4854ca7e27f0e109ed images.v1_24_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:adcd26b9b64462153973ea1103f1c23c68012af315d804705be9ad927c89f7ff images.v1_24_6.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:2514a14cdec51d4570bed5678624d9406539842607bc52bbc98f... images.v1_26_2.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:14c5a52faf20267baa43d9a72ee6416f56fbc41dd640adc2aba3c4043802a0e9 images.v1_26_2.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:028e10651db0d1ddb769a27c9483c6d41be6ac597f253afd9d599f395d9c82d8 images.v1_26_2.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:366266f10e658c4cea86bddf6ee847e1908ea4dd780cb5f7fb0e466bac8995f1 images.v1_26_2.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:d518f3d1539f45e1253c5c9fa22062802804601d4998cd50344e476a3cc388fe images.v1_26_2.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:ecc6a22a471f4f4b836648f3a72ea7f57a4ea960ebcbc7dbe3fe7295... images.v1_26_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2ea112ab90b8540f11e9949d77c3e7e3b3ef57ac3bf23f6cf1e883a88430e1f9 images.v1_26_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:33feac0c9c888b375e207e86b3f9a1a289126ca46b64632a7f693e2191cfbbfd images.v1_26_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2ca96716812d339775d3dfd396c863834dd3810720e98bfcf87bc67c5fbd29b5 images.v1_26_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:26747627ae22bbdffcf9de58077454fc0c890cda83659d7834b15dea2b5aaaf2 images.v1_26_3.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f7ab868455b5e887e2d89b7078678531290365f9166cae99ce56119f... images.v1_26_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:9536c5850961488b3e01e29140d9ace0cbaa1f4bd1c1860cb49d10bf0514a5bf images.v1_26_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:02b82941a92c537233c4f60d9223da2e637b045189b8700dd7030bd9c1c352d5 images.v1_26_4.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:cadc30c15a54d89de1992624a3641c7d5951dd292b668d026ab9d5e2f3878a77 images.v1_26_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b45ecae5a9240b40403c4e39c6a81ab66c8c7e8de194dc3e21b1336ff3a0fa38 images.v1_26_4.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:950e9a2e8fef8740b4909957c2cced52d45abd66324fb056097f2d07... images.v1_26_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:be16b9a7e2693bf294c99d96ba4cf36e98629ebff2ce6f2ce946fd9ae1e9f2dc images.v1_26_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91229b8d6e932178ddddf0b4878114b65c0451755919996239d1fe6285b644e8 images.v1_26_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8a21e30593e51f2fd2e51d9ab1d0ed2fc43eaa9b98173d7fb74f799d6b2f163d images.v1_26_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:47100186c27934adeda3002bb04cac28980ca8854eee7d6e4f4b3f85562e9a8e images.v1_26_6.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f39e2c28ef36fce9f808f3946cc4e4126047e142ad84cb18c222cecc... images.v1_26_8.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:dd02b94ca8e81ad0d0177f187cc7e67a52d58856f92e92bc4a71ab3f3723fd1f images.v1_26_8.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e59864113e84cdf5f14d93229af720a1a3ab85b6e2ece8e0477079ab62a14068 images.v1_26_8.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d607fea2f3f03ba269b90fcaa53f1a0e696113236e125da5be142cbcf89ae4cf images.v1_26_8.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b17a2794ec7b94f5c67ac7b6b230b9a699d0eadef0bc35ede58b17df64aa26fc images.v1_26_8.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:9f7b28f8c92b59715f9e1d0b7b463ae870fab5899c2332c53542ec50... images.v1_27_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ddadd677161ad8c1077dd156821d6b4e32742ccbb210e9c14696fa66a58c0867 images.v1_27_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0850242436e88f7d82f0f2126de064c7e0f09844f31d8ff0f53dc8d3908075d9 images.v1_27_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:742bc084c26769ff57cb3aa47b7a35c2b94684c3f67a9388da07a0490a942e5c images.v1_27_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7d15cebf9b62f3f235c0eab5158ac8ff2fda86a1d193490dc94c301402c99da8 images.v1_27_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:b2b3216a05f6136ed9ddb71d72d493030c6d6b431682dddffa692c760b6c9ba1 images.v1_27_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806 images.v1_27_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2e515a40de141bd4e516bfcf4fd0cbb8d236ac02799a7a35d77ae44f53916bc9 images.v1_27_5.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d1baba8cb454b62d804dc427d4ccfea928348631c384d1ab3d170e1e2a9d1178 images.v1_27_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:650da1e2ad1cb93e6a0231dba7ca1f27f4cccac84e5925135281adc629a0caea images.v1_27_5.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ae2919cd446e0e1f0a21d0850e7809ba8f44c06d484c023b3bee2787ca4bdd0 kubectl.kubernetes.io/default-container: sail-operator olm.operatorGroup: global-operators olm.operatorNamespace: openshift-operators olm.targetNamespaces: operatorframework.io/properties: {"properties":[{"type":"olm.gvk","value":{"group":"extensions.istio.io","kind":"WasmPlugin","version":"v1alpha1"}},{"type":"olm.gvk","valu... operators.openshift.io/valid-subscription: ["OpenShift Container Platform", "OpenShift Platform Plus"] operators.operatorframework.io/builder: operator-sdk-v1.41.1 operators.operatorframework.io/internal-objects: ["wasmplugins.extensions.istio.io","destinationrules.networking.istio.io","envoyfilters.networking.istio.io","gateways.networking.istio.io... operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/istio-ecosystem/sail-operator support: Red Hat, Inc. Service Account: servicemesh-operator3 Containers: sail-operator: Image: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 Port: Host Port: Command: /usr/local/bin/sail-operator Args: --health-probe-bind-address=:8081 --metrics-bind-address=:8443 --zap-log-level=info Limits: cpu: 500m memory: 1Gi Requests: cpu: 10m memory: 64Mi Liveness: http-get http://:8081/healthz delay=15s timeout=1s period=20s #success=1 #failure=3 Readiness: http-get http://:8081/readyz delay=5s timeout=1s period=10s #success=1 #failure=3 Environment: OPERATOR_CONDITION_NAME: servicemeshoperator3.v3.2.2 Mounts: /etc/sail-operator from operator-config (ro) Volumes: operator-config: Type: DownwardAPI (a volume populated by information about the pod) Items: metadata.annotations -> config.properties Node-Selectors: Tolerations: Conditions: Type Status Reason ---- ------ ------ Available True MinimumReplicasAvailable Progressing True NewReplicaSetAvailable OldReplicaSets: NewReplicaSet: servicemesh-operator3-5968d78df4 (1/1 replicas created) Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal ScalingReplicaSet 9m30s deployment-controller Scaled up replica set servicemesh-operator3-5968d78df4 from 0 to 1 ========================================================= =====Istio YAML=====: error getting yaml: error executing command: /usr/bin/sh -c oc get istio default -o yaml: Error from server (NotFound): istios.sailoperator.io "default" not found , output: Error from server (NotFound): istios.sailoperator.io "default" not found =====Pods in istio-system=====: =====Istiod logs=====: error executing command: /usr/bin/sh -c oc -n istio-system logs deploy/istiod --since=2m0s: error: error from server (NotFound): namespaces "istio-system" not found in namespace "istio-system" =====Events in istio-system=====: =====Istioctl Proxy Status=====: failed to get proxy status: error executing command: /usr/bin/sh -c /go/src/github.com/openshift-service-mesh/sail-operator/bin/istioctl proxy-status: Error: no running Istio pods in "istio-system" ========================================================= =====IstioCNI YAML=====: apiVersion: sailoperator.io/v1 kind: IstioCNI metadata: creationTimestamp: "2026-02-24T04:05:27Z" finalizers: - sailoperator.io/sail-operator generation: 1 name: default resourceVersion: "42375" uid: 1007e5e1-4644-4220-abcb-bd7898374d66 spec: namespace: istio-cni version: v1.27.5 status: conditions: - lastTransitionTime: "2026-02-24T04:05:27Z" message: 'error reconciling resource: validation error: namespace "istio-cni" doesn''t exist' reason: ReconcileError status: "False" type: Reconciled - lastTransitionTime: "2026-02-24T04:05:27Z" message: istio-cni-node DaemonSet not found reason: DaemonSetNotReady status: "False" type: Ready observedGeneration: 1 state: ReconcileError =====Istio CNI DaemonSet YAML=====: error getting yaml: error executing command: /usr/bin/sh -c oc -n istio-cni get daemonset istio-cni-node -o yaml: Error from server (NotFound): namespaces "istio-cni" not found , output: Error from server (NotFound): namespaces "istio-cni" not found =====Events in istio-cni=====: =====Pods in istio-cni=====: =====Istio CNI DaemonSet describe=====: error describing resource: error executing command: /usr/bin/sh -c oc -n istio-cni describe daemonset istio-cni-node: Error from server (NotFound): namespaces "istio-cni" not found , output: Error from server (NotFound): namespaces "istio-cni" not found =====Istio CNI logs=====: error executing command: /usr/bin/sh -c oc -n istio-cni logs daemonset/istio-cni-node --since=2m0s: error: error from server (NotFound): namespaces "istio-cni" not found in namespace "istio-cni" ========================================================= =====CA certs in istio-system=====: error getting secret: error executing command: /usr/bin/sh -c oc -n istio-system get secret cacerts -o yaml: Error from server (NotFound): namespaces "istio-system" not found , output Error from server (NotFound): namespaces "istio-system" not found ========================================================= =====Namespace sleep (not found)=====: error getting yaml: error executing command: /usr/bin/sh -c oc get namespace sleep -o yaml: Error from server (NotFound): namespaces "sleep" not found , output: Error from server (NotFound): namespaces "sleep" not found =====Namespace httpbin (not found)=====: error getting yaml: error executing command: /usr/bin/sh -c oc get namespace httpbin -o yaml: Error from server (NotFound): namespaces "httpbin" not found , output: Error from server (NotFound): namespaces "httpbin" not found =====Namespace sample (not found)=====: error getting yaml: error executing command: /usr/bin/sh -c oc get namespace sample -o yaml: Error from server (NotFound): namespaces "sample" not found , output: Error from server (NotFound): namespaces "sample" not found ========================================================= • [FAILED] [7.139 seconds] Control Plane Installation defaulting IstioCNI [It] no spec [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:51 [FAILED] Expected : v1.27.5 to equal : v1.27.3 In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:65 @ 02/24/26 04:05:28.14 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation defaulting IstioCNI [It] empty spec [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:52 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:52 @ 02/24/26 04:05:34.591 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation defaulting Istio [It] no spec [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:74 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:74 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation defaulting Istio [It] empty spec [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:75 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:75 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation defaulting Istio [It] empty updateStrategy [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:76 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:76 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the IstioCNI CR is created [It] deploys the CNI DaemonSet [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:115 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:115 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the IstioCNI CR is created [It] uses the correct image [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:125 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:125 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the IstioCNI CR is created [It] updates the status to Reconciled [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:130 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:130 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the IstioCNI CR is created [It] updates the status to Ready [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:136 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:136 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the IstioCNI CR is created [It] doesn't continuously reconcile the IstioCNI CR [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:142 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:142 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the Istio CR is created [It] updates the Istio CR status to Reconciled [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:154 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:154 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the Istio CR is created [It] updates the Istio CR status to Ready [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:160 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:160 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the Istio CR is created [It] deploys istiod [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:166 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:166 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the Istio CR is created [It] uses the correct image [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:173 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:173 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the Istio CR is created [It] doesn't continuously reconcile the Istio CR [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:178 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:178 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when sample pod is deployed [It] updates the pods status to Running [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:196 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:196 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when sample pod is deployed [It] has sidecars with the correct istio version [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:203 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:203 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the Istio CR is deleted [It] removes everything from the namespace [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:219 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:219 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.27.3 when the IstioCNI CR is deleted [It] removes everything from the CNI namespace [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:233 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:233 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the IstioCNI CR is created [It] deploys the CNI DaemonSet [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:115 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:115 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the IstioCNI CR is created [It] uses the correct image [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:125 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:125 @ 02/24/26 04:05:34.592 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the IstioCNI CR is created [It] updates the status to Reconciled [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:130 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:130 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the IstioCNI CR is created [It] updates the status to Ready [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:136 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:136 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the IstioCNI CR is created [It] doesn't continuously reconcile the IstioCNI CR [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:142 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:142 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the Istio CR is created [It] updates the Istio CR status to Reconciled [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:154 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:154 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the Istio CR is created [It] updates the Istio CR status to Ready [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:160 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:160 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the Istio CR is created [It] deploys istiod [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:166 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:166 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the Istio CR is created [It] uses the correct image [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:173 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:173 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the Istio CR is created [It] doesn't continuously reconcile the Istio CR [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:178 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:178 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when sample pod is deployed [It] updates the pods status to Running [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:196 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:196 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when sample pod is deployed [It] has sidecars with the correct istio version [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:203 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:203 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the Istio CR is deleted [It] removes everything from the namespace [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:219 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:219 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.26.6 when the IstioCNI CR is deleted [It] removes everything from the CNI namespace [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:233 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:233 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the IstioCNI CR is created [It] deploys the CNI DaemonSet [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:115 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:115 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the IstioCNI CR is created [It] uses the correct image [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:125 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:125 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the IstioCNI CR is created [It] updates the status to Reconciled [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:130 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:130 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the IstioCNI CR is created [It] updates the status to Ready [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:136 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:136 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the IstioCNI CR is created [It] doesn't continuously reconcile the IstioCNI CR [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:142 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:142 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the Istio CR is created [It] updates the Istio CR status to Reconciled [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:154 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:154 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the Istio CR is created [It] updates the Istio CR status to Ready [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:160 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:160 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the Istio CR is created [It] deploys istiod [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:166 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:166 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the Istio CR is created [It] uses the correct image [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:173 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:173 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the Istio CR is created [It] doesn't continuously reconcile the Istio CR [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:178 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:178 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when sample pod is deployed [It] updates the pods status to Running [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:196 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:196 @ 02/24/26 04:05:34.593 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when sample pod is deployed [It] has sidecars with the correct istio version [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:203 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:203 @ 02/24/26 04:05:34.594 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the Istio CR is deleted [It] removes everything from the namespace [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:219 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:219 @ 02/24/26 04:05:34.594 ------------------------------ S [SKIPPED] [0.000 seconds] Control Plane Installation given Istio version v1.24.6 when the IstioCNI CR is deleted [It] removes everything from the CNI namespace [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:233 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:233 @ 02/24/26 04:05:34.594 ------------------------------ [ReportAfterSuite] Autogenerated ReportAfterSuite for --junit-report autogenerated by Ginkgo [ReportAfterSuite] PASSED [0.004 seconds] ------------------------------ Summarizing 1 Failure: [FAIL] Control Plane Installation defaulting IstioCNI [It] no spec [smoke, control-plane, slow] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/controlplane/control_plane_test.go:65 Ran 1 of 59 Specs in 7.142 seconds FAIL! -- 0 Passed | 1 Failed | 0 Pending | 58 Skipped --- FAIL: TestControlPlane (7.15s) FAIL 2026-02-24T04:05:34.606916Z info loading supported istio versions from versions.ossm.yaml PASS 2026-02-24T04:05:34.623428Z info loading supported istio versions from versions.ossm.yaml PASS 2026-02-24T04:05:34.640669Z info loading supported istio versions from versions.ossm.yaml ************ Running Setup ************ Initializing k8s client Running Suite: Multiple Control Planes Test Suite - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane ======================================================================================================================================= Random Seed: 1771905703 Will run 42 of 42 specs ------------------------------ Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Sets up namespaces [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:52 • [3.636 seconds] ------------------------------ Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Installs IstioCNI [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:61 IstioCNI YAML: apiVersion: sailoperator.io/v1 kind: IstioCNI metadata: name: default spec: version: v1.27.3 namespace: istio-cni [FAILED] in [It] - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/util/common/e2e_utils.go:437 @ 02/24/26 04:05:38.565 The test run has failures and the debug information is as follows: =====Operator Deployment YAML=====: apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "1" creationTimestamp: "2026-02-24T03:56:00Z" generation: 1 labels: app.kubernetes.io/component: sail-operator app.kubernetes.io/created-by: servicemeshoperator3 app.kubernetes.io/instance: servicemesh-operator3 app.kubernetes.io/managed-by: helm app.kubernetes.io/name: deployment app.kubernetes.io/part-of: servicemeshoperator3 control-plane: servicemesh-operator3 olm.deployment-spec-hash: buE8Ji5HzUIQCWGlISehVHZUQrs0h4LEEuvZb4 olm.managed: "true" olm.owner: servicemeshoperator3.v3.2.2 olm.owner.kind: ClusterServiceVersion olm.owner.namespace: openshift-operators operators.coreos.com/servicemeshoperator3.openshift-operators: "" name: servicemesh-operator3 namespace: openshift-operators ownerReferences: - apiVersion: operators.coreos.com/v1alpha1 blockOwnerDeletion: false controller: false kind: ClusterServiceVersion name: servicemeshoperator3.v3.2.2 uid: 17646cc5-54d9-41d5-bce2-2b0cd982beac resourceVersion: "33353" uid: 84b2062d-9b28-46d0-b84f-1348f8e8558c spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 1 selector: matchLabels: app.kubernetes.io/created-by: servicemeshoperator3 app.kubernetes.io/part-of: servicemeshoperator3 control-plane: servicemesh-operator3 strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 25% type: RollingUpdate template: metadata: annotations: alm-examples: |- [ { "apiVersion": "sailoperator.io/v1", "kind": "Istio", "metadata": { "name": "default" }, "spec": { "namespace": "istio-system", "updateStrategy": { "inactiveRevisionDeletionGracePeriodSeconds": 30, "type": "InPlace" }, "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "IstioCNI", "metadata": { "name": "default" }, "spec": { "namespace": "istio-cni", "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "ZTunnel", "metadata": { "name": "default" }, "spec": { "namespace": "ztunnel", "version": "v1.27.3" } } ] capabilities: Seamless Upgrades categories: OpenShift Optional, Integration & Delivery, Networking, Security containerImage: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 createdAt: "2026-01-27T14:22:23Z" description: The OpenShift Service Mesh Operator enables you to install, configure, and manage an instance of Red Hat OpenShift Service Mesh. OpenShift Service Mesh is based on the open source Istio project. features.operators.openshift.io/cnf: "false" features.operators.openshift.io/cni: "true" features.operators.openshift.io/csi: "false" features.operators.openshift.io/disconnected: "true" features.operators.openshift.io/fips-compliant: "true" features.operators.openshift.io/proxy-aware: "false" features.operators.openshift.io/tls-profiles: "false" features.operators.openshift.io/token-auth-aws: "false" features.operators.openshift.io/token-auth-azure: "false" features.operators.openshift.io/token-auth-gcp: "false" images.v1_24_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2b60b0f33affda8b5b2cc30a4b09b2198b053fb1a914d386d35fcf03c09234e6 images.v1_24_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a020acb4a74040df03077924e10465454092f6c34a902b391fba55563c08f826 images.v1_24_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f592b91a6f28559abdf6546ff6c3ae70a44d8f811592746e9eb02cdb2e5dec9d images.v1_24_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:17db00a219de14e5901b5a5eca64d3c6684ca74c1dba3ae3b03787c655fe9c80 images.v1_24_4.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:54cada48e5c9824f255f82daa2ef5bea236919e521d3ea49885f2883ced2b7bc images.v1_24_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:87b967785d7cc222f9df9cb49f0373a9819bf67910ce523dc3b8345849e881dd images.v1_24_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7fa655f5efb1175ff1e1c138371fc1233e5d4313c5feb07194428d0d1fdd33a3 images.v1_24_5.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:7ea9b82e192402566e69063a4787351be9f1ef50719bfd1a8f5d5940362b3f70 images.v1_24_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0183bcce17e39308d1ceb8f4e7a88923f037f738b342e9673406cc2c44b525ac images.v1_24_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0d8d08879a9af334b1ebb345c58bbd395cbfa77646552485329919e3bd075465 images.v1_24_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5e1509e1746653b00125c540258d0eed2397ff74745f2d4854ca7e27f0e109ed images.v1_24_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:adcd26b9b64462153973ea1103f1c23c68012af315d804705be9ad927c89f7ff images.v1_24_6.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:2514a14cdec51d4570bed5678624d9406539842607bc52bbc98f3de40308f986 images.v1_26_2.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:14c5a52faf20267baa43d9a72ee6416f56fbc41dd640adc2aba3c4043802a0e9 images.v1_26_2.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:028e10651db0d1ddb769a27c9483c6d41be6ac597f253afd9d599f395d9c82d8 images.v1_26_2.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:366266f10e658c4cea86bddf6ee847e1908ea4dd780cb5f7fb0e466bac8995f1 images.v1_26_2.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:d518f3d1539f45e1253c5c9fa22062802804601d4998cd50344e476a3cc388fe images.v1_26_2.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:ecc6a22a471f4f4b836648f3a72ea7f57a4ea960ebcbc7dbe3fe729500902d0b images.v1_26_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2ea112ab90b8540f11e9949d77c3e7e3b3ef57ac3bf23f6cf1e883a88430e1f9 images.v1_26_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:33feac0c9c888b375e207e86b3f9a1a289126ca46b64632a7f693e2191cfbbfd images.v1_26_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2ca96716812d339775d3dfd396c863834dd3810720e98bfcf87bc67c5fbd29b5 images.v1_26_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:26747627ae22bbdffcf9de58077454fc0c890cda83659d7834b15dea2b5aaaf2 images.v1_26_3.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f7ab868455b5e887e2d89b7078678531290365f9166cae99ce56119f31fa2ba4 images.v1_26_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:9536c5850961488b3e01e29140d9ace0cbaa1f4bd1c1860cb49d10bf0514a5bf images.v1_26_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:02b82941a92c537233c4f60d9223da2e637b045189b8700dd7030bd9c1c352d5 images.v1_26_4.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:cadc30c15a54d89de1992624a3641c7d5951dd292b668d026ab9d5e2f3878a77 images.v1_26_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b45ecae5a9240b40403c4e39c6a81ab66c8c7e8de194dc3e21b1336ff3a0fa38 images.v1_26_4.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:950e9a2e8fef8740b4909957c2cced52d45abd66324fb056097f2d0782970573 images.v1_26_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:be16b9a7e2693bf294c99d96ba4cf36e98629ebff2ce6f2ce946fd9ae1e9f2dc images.v1_26_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91229b8d6e932178ddddf0b4878114b65c0451755919996239d1fe6285b644e8 images.v1_26_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8a21e30593e51f2fd2e51d9ab1d0ed2fc43eaa9b98173d7fb74f799d6b2f163d images.v1_26_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:47100186c27934adeda3002bb04cac28980ca8854eee7d6e4f4b3f85562e9a8e images.v1_26_6.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f39e2c28ef36fce9f808f3946cc4e4126047e142ad84cb18c222cecceae29730 images.v1_26_8.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:dd02b94ca8e81ad0d0177f187cc7e67a52d58856f92e92bc4a71ab3f3723fd1f images.v1_26_8.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e59864113e84cdf5f14d93229af720a1a3ab85b6e2ece8e0477079ab62a14068 images.v1_26_8.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d607fea2f3f03ba269b90fcaa53f1a0e696113236e125da5be142cbcf89ae4cf images.v1_26_8.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b17a2794ec7b94f5c67ac7b6b230b9a699d0eadef0bc35ede58b17df64aa26fc images.v1_26_8.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:9f7b28f8c92b59715f9e1d0b7b463ae870fab5899c2332c53542ec5021541a78 images.v1_27_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ddadd677161ad8c1077dd156821d6b4e32742ccbb210e9c14696fa66a58c0867 images.v1_27_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0850242436e88f7d82f0f2126de064c7e0f09844f31d8ff0f53dc8d3908075d9 images.v1_27_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:742bc084c26769ff57cb3aa47b7a35c2b94684c3f67a9388da07a0490a942e5c images.v1_27_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7d15cebf9b62f3f235c0eab5158ac8ff2fda86a1d193490dc94c301402c99da8 images.v1_27_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:b2b3216a05f6136ed9ddb71d72d493030c6d6b431682dddffa692c760b6c9ba1 images.v1_27_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806 images.v1_27_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2e515a40de141bd4e516bfcf4fd0cbb8d236ac02799a7a35d77ae44f53916bc9 images.v1_27_5.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d1baba8cb454b62d804dc427d4ccfea928348631c384d1ab3d170e1e2a9d1178 images.v1_27_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:650da1e2ad1cb93e6a0231dba7ca1f27f4cccac84e5925135281adc629a0caea images.v1_27_5.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ae2919cd446e0e1f0a21d0850e7809ba8f44c06d484c023b3bee2787ca4bdd0 kubectl.kubernetes.io/default-container: sail-operator olm.operatorGroup: global-operators olm.operatorNamespace: openshift-operators olm.targetNamespaces: "" operatorframework.io/properties: '{"properties":[{"type":"olm.gvk","value":{"group":"extensions.istio.io","kind":"WasmPlugin","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"DestinationRule","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"DestinationRule","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"DestinationRule","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"EnvoyFilter","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Gateway","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Gateway","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Gateway","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ProxyConfig","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ServiceEntry","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ServiceEntry","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"ServiceEntry","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Sidecar","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Sidecar","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"Sidecar","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"VirtualService","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"VirtualService","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"VirtualService","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadEntry","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadEntry","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadEntry","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadGroup","version":"v1"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadGroup","version":"v1alpha3"}},{"type":"olm.gvk","value":{"group":"networking.istio.io","kind":"WorkloadGroup","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"Istio","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"IstioCNI","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"IstioRevision","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"IstioRevisionTag","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"ZTunnel","version":"v1"}},{"type":"olm.gvk","value":{"group":"sailoperator.io","kind":"ZTunnel","version":"v1alpha1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"AuthorizationPolicy","version":"v1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"AuthorizationPolicy","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"PeerAuthentication","version":"v1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"PeerAuthentication","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"RequestAuthentication","version":"v1"}},{"type":"olm.gvk","value":{"group":"security.istio.io","kind":"RequestAuthentication","version":"v1beta1"}},{"type":"olm.gvk","value":{"group":"telemetry.istio.io","kind":"Telemetry","version":"v1"}},{"type":"olm.gvk","value":{"group":"telemetry.istio.io","kind":"Telemetry","version":"v1alpha1"}},{"type":"olm.package","value":{"packageName":"servicemeshoperator3","version":"3.2.2"}}]}' operators.openshift.io/valid-subscription: '["OpenShift Container Platform", "OpenShift Platform Plus"]' operators.operatorframework.io/builder: operator-sdk-v1.41.1 operators.operatorframework.io/internal-objects: '["wasmplugins.extensions.istio.io","destinationrules.networking.istio.io","envoyfilters.networking.istio.io","gateways.networking.istio.io","proxyconfigs.networking.istio.io","serviceentries.networking.istio.io","sidecars.networking.istio.io","virtualservices.networking.istio.io","workloadentries.networking.istio.io","workloadgroups.networking.istio.io","authorizationpolicies.security.istio.io","peerauthentications.security.istio.io","requestauthentications.security.istio.io","telemetries.telemetry.istio.io"]' operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/istio-ecosystem/sail-operator support: Red Hat, Inc. labels: app.kubernetes.io/created-by: servicemeshoperator3 app.kubernetes.io/part-of: servicemeshoperator3 control-plane: servicemesh-operator3 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: kubernetes.io/arch operator: In values: - amd64 - arm64 - ppc64le - s390x - key: kubernetes.io/os operator: In values: - linux containers: - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=:8443 - --zap-log-level=info command: - /usr/local/bin/sail-operator env: - name: OPERATOR_CONDITION_NAME value: servicemeshoperator3.v3.2.2 image: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: sail-operator readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 1Gi requests: cpu: 10m memory: 64Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL readOnlyRootFilesystem: true terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /etc/sail-operator name: operator-config readOnly: true dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true serviceAccount: servicemesh-operator3 serviceAccountName: servicemesh-operator3 terminationGracePeriodSeconds: 10 volumes: - downwardAPI: defaultMode: 420 items: - fieldRef: apiVersion: v1 fieldPath: metadata.annotations path: config.properties name: operator-config status: availableReplicas: 1 conditions: - lastTransitionTime: "2026-02-24T03:56:19Z" lastUpdateTime: "2026-02-24T03:56:19Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-02-24T03:56:00Z" lastUpdateTime: "2026-02-24T03:56:19Z" message: ReplicaSet "servicemesh-operator3-5968d78df4" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 1 replicas: 1 updatedReplicas: 1 =====Operator logs=====: 2026-02-24T04:03:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "e8f23fbf-5df5-4bb1-b286-531b7dd73f67"} 2026-02-24T04:03:44Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "f06cd44c-8ac6-4722-92bb-4098d1338c72"} 2026-02-24T04:03:45Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "f06cd44c-8ac6-4722-92bb-4098d1338c72"} 2026-02-24T04:03:45Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "8633eec1-8f62-4cc9-a70b-70e11aec241c"} 2026-02-24T04:03:46Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "8633eec1-8f62-4cc9-a70b-70e11aec241c"} 2026-02-24T04:03:46Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "063d2529-3506-4cbe-9980-24224500f872"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "2328af4b-b699-4271-8bd3-42eba46bed98"} 2026-02-24T04:03:46Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "2328af4b-b699-4271-8bd3-42eba46bed98", "IstioRevision": "default"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "2328af4b-b699-4271-8bd3-42eba46bed98"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "1392521f-f6e0-4f39-9efd-5c81a583c0ec"} 2026-02-24T04:03:46Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "1392521f-f6e0-4f39-9efd-5c81a583c0ec", "IstioRevision": "default"} 2026-02-24T04:03:46Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "1392521f-f6e0-4f39-9efd-5c81a583c0ec"} 2026-02-24T04:03:47Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "063d2529-3506-4cbe-9980-24224500f872"} 2026-02-24T04:03:47Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "9b3875e2-d8b7-487d-b52a-75187473b38a"} 2026-02-24T04:03:47Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "9b3875e2-d8b7-487d-b52a-75187473b38a", "IstioRevision": "default"} 2026-02-24T04:03:47Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "a4a56030-a552-4ccb-b9d4-934d250d802e"} 2026-02-24T04:03:47Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "9b3875e2-d8b7-487d-b52a-75187473b38a"} 2026-02-24T04:03:48Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "a4a56030-a552-4ccb-b9d4-934d250d802e"} 2026-02-24T04:03:48Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "b0c7a23a-48e6-4aaa-9c13-d2269000fadc"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Added finalizer {"ztunnel": "default", "reconcileID": "a55a9bb0-7b89-4bfa-bc41-b90731cb0e17", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Conflict while adding finalizer; will retry {"ztunnel": "default", "reconcileID": "0dc1d468-4280-4cf1-8d32-2cbc453e4096", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "84738a20-038e-4c2b-a175-1e1fc51a9829"} 2026-02-24T04:03:48.291500Z info klog Warning: would violate PodSecurity "restricted:latest": seLinuxOptions (container "istio-proxy" set forbidden securityContext.seLinuxOptions: type "spc_t"), allowPrivilegeEscalation != false (container "istio-proxy" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "istio-proxy" must not include "NET_ADMIN", "NET_RAW", "SYS_ADMIN" in securityContext.capabilities.add), restricted volume types (volume "cni-ztunnel-sock-dir" uses restricted volume type "hostPath"), runAsNonRoot != true (container "istio-proxy" must not set securityContext.runAsNonRoot=false), runAsUser=0 (container "istio-proxy" must not set runAsUser=0), seccompProfile (pod or container "istio-proxy" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "84738a20-038e-4c2b-a175-1e1fc51a9829"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "13d6df0f-d158-4d14-bc31-a5ff28202bfa"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "13d6df0f-d158-4d14-bc31-a5ff28202bfa"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "dcfdcb8f-c4f0-42d7-8535-d7e5cd8199e8"} 2026-02-24T04:03:48Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "dcfdcb8f-c4f0-42d7-8535-d7e5cd8199e8"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "b0c7a23a-48e6-4aaa-9c13-d2269000fadc"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "c7f0956a-156a-4860-a4e3-7213af25f6df"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "435945d0-7e71-4752-8bfc-7533fcac9c76"} 2026-02-24T04:03:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "435945d0-7e71-4752-8bfc-7533fcac9c76", "IstioRevision": "default"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "435945d0-7e71-4752-8bfc-7533fcac9c76"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "80e7e8b4-2c7c-4da0-aa8b-22fdea1e763f"} 2026-02-24T04:03:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "80e7e8b4-2c7c-4da0-aa8b-22fdea1e763f", "IstioRevision": "default"} 2026-02-24T04:03:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "80e7e8b4-2c7c-4da0-aa8b-22fdea1e763f"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "c7f0956a-156a-4860-a4e3-7213af25f6df"} 2026-02-24T04:03:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "288f48dd-e304-49d2-b7a2-b40d6e37acfc"} 2026-02-24T04:03:50Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "55aea182-f0cf-4d84-a17c-e594e1f5a145"} 2026-02-24T04:03:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "55aea182-f0cf-4d84-a17c-e594e1f5a145"} 2026-02-24T04:03:50Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "288f48dd-e304-49d2-b7a2-b40d6e37acfc"} 2026-02-24T04:03:53Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "307354c9-6dde-42b8-905e-5fd9cfaadeb2"} 2026-02-24T04:03:53Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "307354c9-6dde-42b8-905e-5fd9cfaadeb2"} 2026-02-24T04:03:55Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "ce1e99bc-5a56-4bca-a47e-a024edc6820c"} 2026-02-24T04:03:55Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "ce1e99bc-5a56-4bca-a47e-a024edc6820c"} 2026-02-24T04:03:55Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "58f174f0-7eef-46ec-8047-d4f2de6759cc"} 2026-02-24T04:03:56Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "58f174f0-7eef-46ec-8047-d4f2de6759cc"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "405b3943-21c5-400a-9d83-d5eaf86556b2"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "405b3943-21c5-400a-9d83-d5eaf86556b2"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "d5f02970-32e2-4ac4-bd21-dfe1d6a68336"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "d5f02970-32e2-4ac4-bd21-dfe1d6a68336"} 2026-02-24T04:03:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "b929ae86-36e2-40e4-a25c-84cbd946c6c6"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "b929ae86-36e2-40e4-a25c-84cbd946c6c6"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "642b6229-a0d6-482a-b943-d85fcbf9a4a6"} 2026-02-24T04:04:00Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "6e396ea2-fbe4-4a39-acfb-01d439f2cc91"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "642b6229-a0d6-482a-b943-d85fcbf9a4a6"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "83e84471-1c1f-42f0-b512-2b6b0bc4662c"} 2026-02-24T04:04:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "83e84471-1c1f-42f0-b512-2b6b0bc4662c"} 2026-02-24T04:04:00Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "6e396ea2-fbe4-4a39-acfb-01d439f2cc91"} 2026-02-24T04:04:01Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "12a2daa2-5c31-4bcf-8d2f-e93442ed2ce5"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "90298792-3889-4702-8315-4a9f1ed3200e"} 2026-02-24T04:04:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "90298792-3889-4702-8315-4a9f1ed3200e", "IstioRevision": "default"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "90298792-3889-4702-8315-4a9f1ed3200e"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "cfa795f8-3cdb-460b-9385-6c7778e90808"} 2026-02-24T04:04:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "cfa795f8-3cdb-460b-9385-6c7778e90808", "IstioRevision": "default"} 2026-02-24T04:04:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "cfa795f8-3cdb-460b-9385-6c7778e90808"} 2026-02-24T04:04:01Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "12a2daa2-5c31-4bcf-8d2f-e93442ed2ce5"} 2026-02-24T04:04:08Z INFO ctrlr.istiorev Removed finalizer {"IstioRevision": "default", "reconcileID": "0607e07c-be58-4b02-a720-bc481e9407ab", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:08Z INFO ctrlr.istiorev Resource no longer exists; no need to remove finalizer {"IstioRevision": "default", "reconcileID": "ba829306-e4bd-451d-89f5-3bee7fbe7089", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:09Z INFO ctrlr.istiocni Removed finalizer {"IstioCNI": "default", "reconcileID": "3519c56b-4370-44ad-8448-d8ee0b20ec84", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:11Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "df300f5c-095d-4614-91bd-7fa65126f35b"} 2026-02-24T04:04:11Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "df300f5c-095d-4614-91bd-7fa65126f35b"} 2026-02-24T04:04:11Z INFO ctrlr.ztunnel Removed finalizer {"ztunnel": "default", "reconcileID": "d2940cc2-807f-4721-b0f0-82f0e94bcee8", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:30Z INFO ctrlr.istiocni Added finalizer {"IstioCNI": "default", "reconcileID": "2c068b6c-29cf-4820-97c7-374baa094b3d", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:30Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "be2b3344-8062-4c09-b472-4aa661ac2262"} 2026-02-24T04:04:30.800302Z info klog Warning: spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/install-cni]: deprecated since v1.30; use the "appArmorProfile" field instead 2026-02-24T04:04:30.800324Z info klog Warning: would violate PodSecurity "restricted:latest": forbidden AppArmor profile (annotation must not set AppArmor profile type to "container.apparmor.security.beta.kubernetes.io/install-cni="unconfined""), host namespaces (hostNetwork=true), seLinuxOptions (container "install-cni" set forbidden securityContext.seLinuxOptions: type "spc_t"), allowPrivilegeEscalation != false (container "install-cni" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "install-cni" must not include "DAC_OVERRIDE", "NET_ADMIN", "NET_RAW", "SYS_ADMIN", "SYS_PTRACE" in securityContext.capabilities.add), restricted volume types (volumes "cni-bin-dir", "cni-host-procfs", "cni-ztunnel-sock-dir", "cni-net-dir", "cni-socket-dir", "cni-netns-dir" use restricted volume type "hostPath"), runAsNonRoot != true (container "install-cni" must not set securityContext.runAsNonRoot=false), runAsUser=0 (container "install-cni" must not set runAsUser=0), seccompProfile (pod or container "install-cni" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 2026-02-24T04:04:30Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "be2b3344-8062-4c09-b472-4aa661ac2262"} 2026-02-24T04:04:30Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "74710103-9726-4a70-be65-e2e2c9fe1b4c"} 2026-02-24T04:04:31Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "74710103-9726-4a70-be65-e2e2c9fe1b4c"} 2026-02-24T04:04:31Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "8a3a1e4c-a3ab-4a8e-aea6-42ef95463867"} 2026-02-24T04:04:31Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "8a3a1e4c-a3ab-4a8e-aea6-42ef95463867"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "f3673c7c-7182-442b-bae0-526933bb1f37"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "f3673c7c-7182-442b-bae0-526933bb1f37"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "792d6b0a-aae7-4e9b-83c6-35b66323638f"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "792d6b0a-aae7-4e9b-83c6-35b66323638f"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "7e609055-0572-4953-917e-e99b06b091ef"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "7e609055-0572-4953-917e-e99b06b091ef"} 2026-02-24T04:04:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "0cd54727-40b5-4ba4-9d9e-22a18b40a442"} 2026-02-24T04:04:38Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "0cd54727-40b5-4ba4-9d9e-22a18b40a442"} 2026-02-24T04:04:38Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "310a9ddd-b292-4b3d-94f0-1c58b838d517"} 2026-02-24T04:04:38Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "310a9ddd-b292-4b3d-94f0-1c58b838d517"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "260a7ed9-45ef-4e94-a5b1-ee9415b39622"} 2026-02-24T04:04:38Z INFO ctrlr.istio Creating IstioRevision {"Istio": "default", "reconcileID": "260a7ed9-45ef-4e94-a5b1-ee9415b39622", "IstioRevision": "default"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "260a7ed9-45ef-4e94-a5b1-ee9415b39622"} 2026-02-24T04:04:38Z INFO ctrlr.istiorev Added finalizer {"IstioRevision": "default", "reconcileID": "9d4c9751-8920-4257-950d-308ca963ca10", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:38Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "70d31042-d774-4a77-b363-f9eca346a92e"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "489834b7-e924-423c-ac66-34d924e0f385"} 2026-02-24T04:04:38Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "489834b7-e924-423c-ac66-34d924e0f385", "IstioRevision": "default"} 2026-02-24T04:04:38Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "489834b7-e924-423c-ac66-34d924e0f385"} 2026-02-24T04:04:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "70d31042-d774-4a77-b363-f9eca346a92e"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "b45eb93e-bf3c-497c-9406-0de92438c2e2"} 2026-02-24T04:04:39Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "b45eb93e-bf3c-497c-9406-0de92438c2e2", "IstioRevision": "default"} 2026-02-24T04:04:39Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "cae8b108-13ce-42bb-afcb-d6456fdbc6e3"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "b45eb93e-bf3c-497c-9406-0de92438c2e2"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "e5df568d-bc1e-4400-aedc-0828bf8e634a"} 2026-02-24T04:04:39Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "e5df568d-bc1e-4400-aedc-0828bf8e634a", "IstioRevision": "default"} 2026-02-24T04:04:39Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "e5df568d-bc1e-4400-aedc-0828bf8e634a"} 2026-02-24T04:04:39Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "cae8b108-13ce-42bb-afcb-d6456fdbc6e3"} 2026-02-24T04:04:45Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "5e7cfeeb-9159-41c6-9c75-9ff070fbcc76"} 2026-02-24T04:04:46Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "5e7cfeeb-9159-41c6-9c75-9ff070fbcc76"} 2026-02-24T04:04:46Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "d39341a4-872a-4ec4-9469-831e1fdda1db"} 2026-02-24T04:04:47Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "d39341a4-872a-4ec4-9469-831e1fdda1db"} 2026-02-24T04:04:47Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "eff94f87-92e6-4f17-9992-947cada481b4"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "49f383a0-5966-446a-9efd-5cd7749c40f9"} 2026-02-24T04:04:47Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "49f383a0-5966-446a-9efd-5cd7749c40f9", "IstioRevision": "default"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "49f383a0-5966-446a-9efd-5cd7749c40f9"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "b074fa46-6999-4b7d-944e-f921342a8edf"} 2026-02-24T04:04:47Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "b074fa46-6999-4b7d-944e-f921342a8edf", "IstioRevision": "default"} 2026-02-24T04:04:47Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "b074fa46-6999-4b7d-944e-f921342a8edf"} 2026-02-24T04:04:48Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "eff94f87-92e6-4f17-9992-947cada481b4"} 2026-02-24T04:04:48Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "73e9c8c3-31d0-42b7-bc56-ffb27c5cacc4"} 2026-02-24T04:04:48Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "7e7bf2f6-d2c0-4176-96cd-51629d5891d1"} 2026-02-24T04:04:48Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "7e7bf2f6-d2c0-4176-96cd-51629d5891d1", "IstioRevision": "default"} 2026-02-24T04:04:48Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "7e7bf2f6-d2c0-4176-96cd-51629d5891d1"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "73e9c8c3-31d0-42b7-bc56-ffb27c5cacc4"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "5e22f70b-4006-4180-b976-63c3ea037595"} 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Added finalizer {"ztunnel": "default", "reconcileID": "a27d2036-22b8-45e6-aa21-5e9627c30d7e", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "e82068ed-b4cb-4c0d-a413-9a7b7dfeb474"} 2026-02-24T04:04:49.733069Z info klog Warning: would violate PodSecurity "restricted:latest": seLinuxOptions (container "istio-proxy" set forbidden securityContext.seLinuxOptions: type "spc_t"), allowPrivilegeEscalation != false (container "istio-proxy" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "istio-proxy" must not include "NET_ADMIN", "NET_RAW", "SYS_ADMIN" in securityContext.capabilities.add), restricted volume types (volume "cni-ztunnel-sock-dir" uses restricted volume type "hostPath"), runAsNonRoot != true (container "istio-proxy" must not set securityContext.runAsNonRoot=false), runAsUser=0 (container "istio-proxy" must not set runAsUser=0), seccompProfile (pod or container "istio-proxy" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost") 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "e82068ed-b4cb-4c0d-a413-9a7b7dfeb474"} 2026-02-24T04:04:49Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "8abd4dbe-95aa-4e3a-89e8-146d9c6585d3"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "5e22f70b-4006-4180-b976-63c3ea037595"} 2026-02-24T04:04:49Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "41694585-e709-4148-b86d-12a166cdeec9"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "bb91a933-2e24-4630-937e-5281d5e0a5d4"} 2026-02-24T04:04:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "bb91a933-2e24-4630-937e-5281d5e0a5d4", "IstioRevision": "default"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "bb91a933-2e24-4630-937e-5281d5e0a5d4"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "b0f07248-8bb8-49cc-a434-44ebe65ccfe3"} 2026-02-24T04:04:49Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "b0f07248-8bb8-49cc-a434-44ebe65ccfe3", "IstioRevision": "default"} 2026-02-24T04:04:49Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "b0f07248-8bb8-49cc-a434-44ebe65ccfe3"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "8abd4dbe-95aa-4e3a-89e8-146d9c6585d3"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "ce9ca287-8811-4a9e-b655-af999745381f"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "ce9ca287-8811-4a9e-b655-af999745381f"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "fd84f2ee-1003-4f9d-bdb4-47ff847f1fb8"} 2026-02-24T04:04:50Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "fd84f2ee-1003-4f9d-bdb4-47ff847f1fb8"} 2026-02-24T04:04:50Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "41694585-e709-4148-b86d-12a166cdeec9"} 2026-02-24T04:04:50Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "7a77268e-bd0a-4a45-9333-6401d8299bad"} 2026-02-24T04:04:51Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "7a77268e-bd0a-4a45-9333-6401d8299bad"} 2026-02-24T04:04:58Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "3be06b77-bc3c-45b8-96ef-a3f3ab47a7cb"} 2026-02-24T04:04:58Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "3be06b77-bc3c-45b8-96ef-a3f3ab47a7cb"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "3c0f8dee-f2c8-4519-88cf-6c54b29450ed"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "3c0f8dee-f2c8-4519-88cf-6c54b29450ed"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "f20c9117-c832-4c43-b539-c77eb8fc4a86"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "f20c9117-c832-4c43-b539-c77eb8fc4a86"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "21478a3e-5941-4c14-92bf-fbe3b18eaee2"} 2026-02-24T04:04:59Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "21478a3e-5941-4c14-92bf-fbe3b18eaee2"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "23baf85f-eef5-490f-b46a-7f08a87e4f61"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "23baf85f-eef5-490f-b46a-7f08a87e4f61"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "c8d4711c-b69c-4a81-a2b8-c89e5445d1de"} 2026-02-24T04:05:00Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "99d5fd18-c218-4202-8717-d63b9c7c043f"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "c8d4711c-b69c-4a81-a2b8-c89e5445d1de"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "4384ea02-2295-4acd-89f4-ba5f618c0019"} 2026-02-24T04:05:00Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "4384ea02-2295-4acd-89f4-ba5f618c0019"} 2026-02-24T04:05:01Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "99d5fd18-c218-4202-8717-d63b9c7c043f"} 2026-02-24T04:05:01Z INFO ctrlr.istiorev Installing Helm chart {"IstioRevision": "default", "reconcileID": "459570fe-29fb-42f4-9970-b1aa1b4dfde9"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "e3c6a960-2b45-44df-88b3-9168254e0196"} 2026-02-24T04:05:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "e3c6a960-2b45-44df-88b3-9168254e0196", "IstioRevision": "default"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "e3c6a960-2b45-44df-88b3-9168254e0196"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciling {"Istio": "default", "reconcileID": "f7a380fa-784b-4b02-bb84-a8ee2a226604"} 2026-02-24T04:05:01Z INFO ctrlr.istio Updating IstioRevision {"Istio": "default", "reconcileID": "f7a380fa-784b-4b02-bb84-a8ee2a226604", "IstioRevision": "default"} 2026-02-24T04:05:01Z INFO ctrlr.istio Reconciliation done. Updating status. {"Istio": "default", "reconcileID": "f7a380fa-784b-4b02-bb84-a8ee2a226604"} 2026-02-24T04:05:02Z INFO ctrlr.istiorev Reconciliation done. Updating status. {"IstioRevision": "default", "reconcileID": "459570fe-29fb-42f4-9970-b1aa1b4dfde9"} 2026-02-24T04:05:06Z INFO controller-runtime.cache Warning: sailoperator.io/v1alpha1 ZTunnel is deprecated; use sailoperator.io/v1 ZTunnel 2026-02-24T04:05:08Z INFO ctrlr.istiorev Removed finalizer {"IstioRevision": "default", "reconcileID": "2dfc450a-0cc8-4699-8f26-18a5da73bb4e", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:09Z INFO ctrlr.istiocni Removed finalizer {"IstioCNI": "default", "reconcileID": "5d51c8b3-c4fe-4e31-85c2-b54128eb58d3", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:09Z INFO ctrlr.istiocni Resource no longer exists; no need to remove finalizer {"IstioCNI": "default", "reconcileID": "26b4aa4f-8e1b-4816-8be3-fb36d85bd420", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Installing ztunnel Helm chart {"ztunnel": "default", "reconcileID": "b782a8c4-6836-4e23-baf3-25d83a0fa287"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Reconciliation done. Updating status. {"ztunnel": "default", "reconcileID": "b782a8c4-6836-4e23-baf3-25d83a0fa287"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Removed finalizer {"ztunnel": "default", "reconcileID": "d978b4a8-441e-45ea-b5d9-ffaf4cd76700", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:11Z INFO ctrlr.ztunnel Resource no longer exists; no need to remove finalizer {"ztunnel": "default", "reconcileID": "15e8b5f0-ac78-43ce-a973-6ac20ae73a06", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Added finalizer {"IstioCNI": "default", "reconcileID": "39c63a06-a2ea-4c55-a44f-4fce59266d90", "finalizer": "sailoperator.io/sail-operator"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "4f612bc6-8c3c-49a1-80c7-9ccb9eb1eb85"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Validation failed {"IstioCNI": "default", "reconcileID": "4f612bc6-8c3c-49a1-80c7-9ccb9eb1eb85", "error": "validation error: namespace \"istio-cni\" doesn't exist"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "e5d0f0af-569e-4e89-8846-fdb7befcb3fd"} 2026-02-24T04:05:27Z INFO ctrlr.istiocni Validation failed {"IstioCNI": "default", "reconcileID": "e5d0f0af-569e-4e89-8846-fdb7befcb3fd", "error": "validation error: namespace \"istio-cni\" doesn't exist"} 2026-02-24T04:05:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "a206f3bf-2463-47b0-9456-903ca1377890"} 2026-02-24T04:05:37.241616Z info klog Warning: spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/install-cni]: deprecated since v1.30; use the "appArmorProfile" field instead 2026-02-24T04:05:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "a206f3bf-2463-47b0-9456-903ca1377890"} 2026-02-24T04:05:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "b73fbf6f-cd1c-43ef-a110-61395b304757"} 2026-02-24T04:05:37Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "b73fbf6f-cd1c-43ef-a110-61395b304757"} 2026-02-24T04:05:37Z INFO ctrlr.istiocni Installing Helm chart {"IstioCNI": "default", "reconcileID": "eba45fdf-ab54-4113-a23a-e8156b94bed6"} 2026-02-24T04:05:38Z INFO ctrlr.istiocni Reconciliation done. Updating status. {"IstioCNI": "default", "reconcileID": "eba45fdf-ab54-4113-a23a-e8156b94bed6"} =====Events in openshift-operators=====: LAST SEEN TYPE REASON OBJECT MESSAGE 9m24s Warning AppliedWithWarnings installplan/install-vwwpq 1 warning(s) generated during installation of operator "servicemeshoperator3.v3.2.2" (CustomResourceDefinition "virtualservices.networking.istio.io"): unrecognized format "binary" 9m20s Warning AppliedWithWarnings installplan/install-vwwpq 1 warning(s) generated during installation of operator "servicemeshoperator3.v3.2.2" (CustomResourceDefinition "ztunnels.sailoperator.io"): sailoperator.io/v1alpha1 ZTunnel is deprecated; use sailoperator.io/v1 ZTunnel 8m55s Normal Scheduled pod/kiali-operator-7ffb966b85-7nmfn Successfully assigned openshift-operators/kiali-operator-7ffb966b85-7nmfn to ip-10-0-31-248.us-west-2.compute.internal 8m55s Normal AddedInterface pod/kiali-operator-7ffb966b85-7nmfn Add eth0 [10.129.2.12/23] from ovn-kubernetes 8m55s Normal Pulling pod/kiali-operator-7ffb966b85-7nmfn Pulling image "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:80527410292ccafbdc84527576e2fc1f9a0abd7154e2235f06de33f9861570ee" 8m45s Normal Pulled pod/kiali-operator-7ffb966b85-7nmfn Successfully pulled image "registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator@sha256:80527410292ccafbdc84527576e2fc1f9a0abd7154e2235f06de33f9861570ee" in 9.959s (9.959s including waiting). Image size: 756671885 bytes. 8m45s Normal Created pod/kiali-operator-7ffb966b85-7nmfn Created container: operator 8m45s Normal Started pod/kiali-operator-7ffb966b85-7nmfn Started container operator 8m56s Normal SuccessfulCreate replicaset/kiali-operator-7ffb966b85 Created pod: kiali-operator-7ffb966b85-7nmfn 8m56s Normal ScalingReplicaSet deployment/kiali-operator Scaled up replica set kiali-operator-7ffb966b85 from 0 to 1 8m56s Normal RequirementsUnknown clusterserviceversion/kiali-operator.v2.17.4 requirements not yet checked 8m56s Normal RequirementsNotMet clusterserviceversion/kiali-operator.v2.17.4 one or more requirements couldn't be found 8m56s Normal AllRequirementsMet clusterserviceversion/kiali-operator.v2.17.4 all requirements found, attempting install 8m56s Normal InstallSucceeded clusterserviceversion/kiali-operator.v2.17.4 waiting for install components to report healthy 8m56s Normal InstallWaiting clusterserviceversion/kiali-operator.v2.17.4 installing: waiting for deployment kiali-operator to become ready: deployment "kiali-operator" not available: Deployment does not have minimum availability. 8m5s Normal InstallSucceeded clusterserviceversion/kiali-operator.v2.17.4 install strategy completed with no errors 9m33s Normal LeaderElection lease/sail-operator-lock servicemesh-operator3-5968d78df4-b78r2_098875c7-642f-4943-8a03-1ab7eec0d93b became leader 9m38s Normal Scheduled pod/servicemesh-operator3-5968d78df4-b78r2 Successfully assigned openshift-operators/servicemesh-operator3-5968d78df4-b78r2 to ip-10-0-31-248.us-west-2.compute.internal 9m38s Normal AddedInterface pod/servicemesh-operator3-5968d78df4-b78r2 Add eth0 [10.129.2.10/23] from ovn-kubernetes 9m38s Normal Pulling pod/servicemesh-operator3-5968d78df4-b78r2 Pulling image "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743" 9m33s Normal Pulled pod/servicemesh-operator3-5968d78df4-b78r2 Successfully pulled image "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743" in 4.599s (4.599s including waiting). Image size: 170475461 bytes. 9m33s Normal Created pod/servicemesh-operator3-5968d78df4-b78r2 Created container: sail-operator 9m33s Normal Started pod/servicemesh-operator3-5968d78df4-b78r2 Started container sail-operator 9m38s Normal SuccessfulCreate replicaset/servicemesh-operator3-5968d78df4 Created pod: servicemesh-operator3-5968d78df4-b78r2 9m39s Normal ScalingReplicaSet deployment/servicemesh-operator3 Scaled up replica set servicemesh-operator3-5968d78df4 from 0 to 1 9m43s Normal RequirementsUnknown clusterserviceversion/servicemeshoperator3.v3.2.2 requirements not yet checked 9m40s Normal RequirementsNotMet clusterserviceversion/servicemeshoperator3.v3.2.2 one or more requirements couldn't be found 9m39s Normal AllRequirementsMet clusterserviceversion/servicemeshoperator3.v3.2.2 all requirements found, attempting install 9m39s Normal InstallSucceeded clusterserviceversion/servicemeshoperator3.v3.2.2 waiting for install components to report healthy 9m38s Normal InstallWaiting clusterserviceversion/servicemeshoperator3.v3.2.2 installing: waiting for deployment servicemesh-operator3 to become ready: waiting for spec update of deployment "servicemesh-operator3" to be observed... 9m38s Normal InstallWaiting clusterserviceversion/servicemeshoperator3.v3.2.2 installing: waiting for deployment servicemesh-operator3 to become ready: deployment "servicemesh-operator3" not available: Deployment does not have minimum availability. 9m20s Normal InstallSucceeded clusterserviceversion/servicemeshoperator3.v3.2.2 install strategy completed with no errors =====Pods in openshift-operators=====: NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES kiali-operator-7ffb966b85-7nmfn 1/1 Running 0 8m56s 10.129.2.12 ip-10-0-31-248.us-west-2.compute.internal servicemesh-operator3-5968d78df4-b78r2 1/1 Running 0 9m38s 10.129.2.10 ip-10-0-31-248.us-west-2.compute.internal =====Operator Deployment describe=====: Name: servicemesh-operator3 Namespace: openshift-operators CreationTimestamp: Tue, 24 Feb 2026 03:56:00 +0000 Labels: app.kubernetes.io/component=sail-operator app.kubernetes.io/created-by=servicemeshoperator3 app.kubernetes.io/instance=servicemesh-operator3 app.kubernetes.io/managed-by=helm app.kubernetes.io/name=deployment app.kubernetes.io/part-of=servicemeshoperator3 control-plane=servicemesh-operator3 olm.deployment-spec-hash=buE8Ji5HzUIQCWGlISehVHZUQrs0h4LEEuvZb4 olm.managed=true olm.owner=servicemeshoperator3.v3.2.2 olm.owner.kind=ClusterServiceVersion olm.owner.namespace=openshift-operators operators.coreos.com/servicemeshoperator3.openshift-operators= Annotations: deployment.kubernetes.io/revision: 1 Selector: app.kubernetes.io/created-by=servicemeshoperator3,app.kubernetes.io/part-of=servicemeshoperator3,control-plane=servicemesh-operator3 Replicas: 1 desired | 1 updated | 1 total | 1 available | 0 unavailable StrategyType: RollingUpdate MinReadySeconds: 0 RollingUpdateStrategy: 25% max unavailable, 25% max surge Pod Template: Labels: app.kubernetes.io/created-by=servicemeshoperator3 app.kubernetes.io/part-of=servicemeshoperator3 control-plane=servicemesh-operator3 Annotations: alm-examples: [ { "apiVersion": "sailoperator.io/v1", "kind": "Istio", "metadata": { "name": "default" }, "spec": { "namespace": "istio-system", "updateStrategy": { "inactiveRevisionDeletionGracePeriodSeconds": 30, "type": "InPlace" }, "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "IstioCNI", "metadata": { "name": "default" }, "spec": { "namespace": "istio-cni", "version": "v1.27.5" } }, { "apiVersion": "sailoperator.io/v1", "kind": "ZTunnel", "metadata": { "name": "default" }, "spec": { "namespace": "ztunnel", "version": "v1.27.3" } } ] capabilities: Seamless Upgrades categories: OpenShift Optional, Integration & Delivery, Networking, Security containerImage: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 createdAt: 2026-01-27T14:22:23Z description: The OpenShift Service Mesh Operator enables you to install, configure, and manage an instance of Red Hat OpenShift Service Mesh. OpenShift... features.operators.openshift.io/cnf: false features.operators.openshift.io/cni: true features.operators.openshift.io/csi: false features.operators.openshift.io/disconnected: true features.operators.openshift.io/fips-compliant: true features.operators.openshift.io/proxy-aware: false features.operators.openshift.io/tls-profiles: false features.operators.openshift.io/token-auth-aws: false features.operators.openshift.io/token-auth-azure: false features.operators.openshift.io/token-auth-gcp: false images.v1_24_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2b60b0f33affda8b5b2cc30a4b09b2198b053fb1a914d386d35fcf03c09234e6 images.v1_24_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:a020acb4a74040df03077924e10465454092f6c34a902b391fba55563c08f826 images.v1_24_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d6693c31d6137c4219812cf69097d04654b296e0ab059dc48596a09b9cd124b1 images.v1_24_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:f592b91a6f28559abdf6546ff6c3ae70a44d8f811592746e9eb02cdb2e5dec9d images.v1_24_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:17db00a219de14e5901b5a5eca64d3c6684ca74c1dba3ae3b03787c655fe9c80 images.v1_24_4.ztunnel: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:36557fa4817c3d0bac499dc65a4a9d6673500681641943d2f8cec5bfec4355be images.v1_24_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:54cada48e5c9824f255f82daa2ef5bea236919e521d3ea49885f2883ced2b7bc images.v1_24_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:87b967785d7cc222f9df9cb49f0373a9819bf67910ce523dc3b8345849e881dd images.v1_24_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7fa655f5efb1175ff1e1c138371fc1233e5d4313c5feb07194428d0d1fdd33a3 images.v1_24_5.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:7ea9b82e192402566e69063a4787351be9f1ef50719bfd1a8f5d... images.v1_24_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:0183bcce17e39308d1ceb8f4e7a88923f037f738b342e9673406cc2c44b525ac images.v1_24_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0d8d08879a9af334b1ebb345c58bbd395cbfa77646552485329919e3bd075465 images.v1_24_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:5e1509e1746653b00125c540258d0eed2397ff74745f2d4854ca7e27f0e109ed images.v1_24_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:adcd26b9b64462153973ea1103f1c23c68012af315d804705be9ad927c89f7ff images.v1_24_6.ztunnel: registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:2514a14cdec51d4570bed5678624d9406539842607bc52bbc98f... images.v1_26_2.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:14c5a52faf20267baa43d9a72ee6416f56fbc41dd640adc2aba3c4043802a0e9 images.v1_26_2.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:028e10651db0d1ddb769a27c9483c6d41be6ac597f253afd9d599f395d9c82d8 images.v1_26_2.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:366266f10e658c4cea86bddf6ee847e1908ea4dd780cb5f7fb0e466bac8995f1 images.v1_26_2.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:d518f3d1539f45e1253c5c9fa22062802804601d4998cd50344e476a3cc388fe images.v1_26_2.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:ecc6a22a471f4f4b836648f3a72ea7f57a4ea960ebcbc7dbe3fe7295... images.v1_26_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2ea112ab90b8540f11e9949d77c3e7e3b3ef57ac3bf23f6cf1e883a88430e1f9 images.v1_26_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:33feac0c9c888b375e207e86b3f9a1a289126ca46b64632a7f693e2191cfbbfd images.v1_26_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:2ca96716812d339775d3dfd396c863834dd3810720e98bfcf87bc67c5fbd29b5 images.v1_26_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:26747627ae22bbdffcf9de58077454fc0c890cda83659d7834b15dea2b5aaaf2 images.v1_26_3.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f7ab868455b5e887e2d89b7078678531290365f9166cae99ce56119f... images.v1_26_4.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:9536c5850961488b3e01e29140d9ace0cbaa1f4bd1c1860cb49d10bf0514a5bf images.v1_26_4.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:02b82941a92c537233c4f60d9223da2e637b045189b8700dd7030bd9c1c352d5 images.v1_26_4.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:cadc30c15a54d89de1992624a3641c7d5951dd292b668d026ab9d5e2f3878a77 images.v1_26_4.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b45ecae5a9240b40403c4e39c6a81ab66c8c7e8de194dc3e21b1336ff3a0fa38 images.v1_26_4.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:950e9a2e8fef8740b4909957c2cced52d45abd66324fb056097f2d07... images.v1_26_6.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:be16b9a7e2693bf294c99d96ba4cf36e98629ebff2ce6f2ce946fd9ae1e9f2dc images.v1_26_6.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91229b8d6e932178ddddf0b4878114b65c0451755919996239d1fe6285b644e8 images.v1_26_6.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:8a21e30593e51f2fd2e51d9ab1d0ed2fc43eaa9b98173d7fb74f799d6b2f163d images.v1_26_6.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:47100186c27934adeda3002bb04cac28980ca8854eee7d6e4f4b3f85562e9a8e images.v1_26_6.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:f39e2c28ef36fce9f808f3946cc4e4126047e142ad84cb18c222cecc... images.v1_26_8.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:dd02b94ca8e81ad0d0177f187cc7e67a52d58856f92e92bc4a71ab3f3723fd1f images.v1_26_8.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:e59864113e84cdf5f14d93229af720a1a3ab85b6e2ece8e0477079ab62a14068 images.v1_26_8.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d607fea2f3f03ba269b90fcaa53f1a0e696113236e125da5be142cbcf89ae4cf images.v1_26_8.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:b17a2794ec7b94f5c67ac7b6b230b9a699d0eadef0bc35ede58b17df64aa26fc images.v1_26_8.ztunnel: registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:9f7b28f8c92b59715f9e1d0b7b463ae870fab5899c2332c53542ec50... images.v1_27_3.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ddadd677161ad8c1077dd156821d6b4e32742ccbb210e9c14696fa66a58c0867 images.v1_27_3.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:0850242436e88f7d82f0f2126de064c7e0f09844f31d8ff0f53dc8d3908075d9 images.v1_27_3.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:742bc084c26769ff57cb3aa47b7a35c2b94684c3f67a9388da07a0490a942e5c images.v1_27_3.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:7d15cebf9b62f3f235c0eab5158ac8ff2fda86a1d193490dc94c301402c99da8 images.v1_27_3.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:b2b3216a05f6136ed9ddb71d72d493030c6d6b431682dddffa692c760b6c9ba1 images.v1_27_5.cni: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806 images.v1_27_5.istiod: registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:2e515a40de141bd4e516bfcf4fd0cbb8d236ac02799a7a35d77ae44f53916bc9 images.v1_27_5.must-gather: registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:d1baba8cb454b62d804dc427d4ccfea928348631c384d1ab3d170e1e2a9d1178 images.v1_27_5.proxy: registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:650da1e2ad1cb93e6a0231dba7ca1f27f4cccac84e5925135281adc629a0caea images.v1_27_5.ztunnel: registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:0ae2919cd446e0e1f0a21d0850e7809ba8f44c06d484c023b3bee2787ca4bdd0 kubectl.kubernetes.io/default-container: sail-operator olm.operatorGroup: global-operators olm.operatorNamespace: openshift-operators olm.targetNamespaces: operatorframework.io/properties: {"properties":[{"type":"olm.gvk","value":{"group":"extensions.istio.io","kind":"WasmPlugin","version":"v1alpha1"}},{"type":"olm.gvk","valu... operators.openshift.io/valid-subscription: ["OpenShift Container Platform", "OpenShift Platform Plus"] operators.operatorframework.io/builder: operator-sdk-v1.41.1 operators.operatorframework.io/internal-objects: ["wasmplugins.extensions.istio.io","destinationrules.networking.istio.io","envoyfilters.networking.istio.io","gateways.networking.istio.io... operators.operatorframework.io/project_layout: go.kubebuilder.io/v4 repository: https://github.com/istio-ecosystem/sail-operator support: Red Hat, Inc. Service Account: servicemesh-operator3 Containers: sail-operator: Image: registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:5d16c459a85c8f0580a8742911cd76b08f751f2600684cb0cad4acd13bc83743 Port: Host Port: Command: /usr/local/bin/sail-operator Args: --health-probe-bind-address=:8081 --metrics-bind-address=:8443 --zap-log-level=info Limits: cpu: 500m memory: 1Gi Requests: cpu: 10m memory: 64Mi Liveness: http-get http://:8081/healthz delay=15s timeout=1s period=20s #success=1 #failure=3 Readiness: http-get http://:8081/readyz delay=5s timeout=1s period=10s #success=1 #failure=3 Environment: OPERATOR_CONDITION_NAME: servicemeshoperator3.v3.2.2 Mounts: /etc/sail-operator from operator-config (ro) Volumes: operator-config: Type: DownwardAPI (a volume populated by information about the pod) Items: metadata.annotations -> config.properties Node-Selectors: Tolerations: Conditions: Type Status Reason ---- ------ ------ Available True MinimumReplicasAvailable Progressing True NewReplicaSetAvailable OldReplicaSets: NewReplicaSet: servicemesh-operator3-5968d78df4 (1/1 replicas created) Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal ScalingReplicaSet 9m40s deployment-controller Scaled up replica set servicemesh-operator3-5968d78df4 from 0 to 1 ========================================================= =====Istio YAML=====: error getting yaml: error executing command: /usr/bin/sh -c oc get istio default -o yaml: Error from server (NotFound): istios.sailoperator.io "default" not found , output: Error from server (NotFound): istios.sailoperator.io "default" not found =====Pods in istio-system=====: =====Istiod logs=====: error executing command: /usr/bin/sh -c oc -n istio-system logs deploy/istiod --since=2m0s: error: error from server (NotFound): namespaces "istio-system" not found in namespace "istio-system" =====Events in istio-system=====: =====Istioctl Proxy Status=====: failed to get proxy status: error executing command: /usr/bin/sh -c /go/src/github.com/openshift-service-mesh/sail-operator/bin/istioctl proxy-status: Error: no running Istio pods in "istio-system" ========================================================= =====IstioCNI YAML=====: apiVersion: sailoperator.io/v1 kind: IstioCNI metadata: creationTimestamp: "2026-02-24T04:05:27Z" finalizers: - sailoperator.io/sail-operator generation: 1 name: default resourceVersion: "42546" uid: 1007e5e1-4644-4220-abcb-bd7898374d66 spec: namespace: istio-cni version: v1.27.5 status: conditions: - lastTransitionTime: "2026-02-24T04:05:37Z" status: "True" type: Reconciled - lastTransitionTime: "2026-02-24T04:05:27Z" message: not all istio-cni-node pods are ready reason: DaemonSetNotReady status: "False" type: Ready observedGeneration: 1 state: DaemonSetNotReady =====Istio CNI DaemonSet YAML=====: apiVersion: apps/v1 kind: DaemonSet metadata: annotations: deprecated.daemonset.template.generation: "1" meta.helm.sh/release-name: istio-cni meta.helm.sh/release-namespace: istio-cni creationTimestamp: "2026-02-24T04:05:37Z" generation: 1 labels: app.kubernetes.io/instance: istio-cni app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: istio-cni app.kubernetes.io/part-of: istio app.kubernetes.io/version: 1.27.5 helm.sh/chart: cni-1.27.5 istio.io/rev: default k8s-app: istio-cni-node managed-by: sail-operator operator.istio.io/component: Cni release: istio-cni name: istio-cni-node namespace: istio-cni ownerReferences: - apiVersion: sailoperator.io/v1 blockOwnerDeletion: true controller: true kind: IstioCNI name: default uid: 1007e5e1-4644-4220-abcb-bd7898374d66 resourceVersion: "42498" uid: cd637138-d316-4239-a8b7-5d8e09c25691 spec: revisionHistoryLimit: 10 selector: matchLabels: k8s-app: istio-cni-node template: metadata: annotations: container.apparmor.security.beta.kubernetes.io/install-cni: unconfined prometheus.io/path: /metrics prometheus.io/port: "15014" prometheus.io/scrape: "true" sidecar.istio.io/inject: "false" labels: app.kubernetes.io/instance: istio-cni app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: istio-cni app.kubernetes.io/part-of: istio app.kubernetes.io/version: 1.27.5 helm.sh/chart: cni-1.27.5 istio.io/dataplane-mode: none k8s-app: istio-cni-node sidecar.istio.io/inject: "false" spec: containers: - args: - --log_output_level=info command: - install-cni env: - name: REPAIR_NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: REPAIR_RUN_AS_DAEMON value: "true" - name: REPAIR_SIDECAR_ANNOTATION value: sidecar.istio.io/status - name: ALLOW_SWITCH_TO_HOST_NS value: "true" - name: NODE_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: spec.nodeName - name: GOMEMLIMIT valueFrom: resourceFieldRef: divisor: "1" resource: limits.memory - name: GOMAXPROCS valueFrom: resourceFieldRef: divisor: "1" resource: limits.cpu - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: POD_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace envFrom: - configMapRef: name: istio-cni-config image: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806 imagePullPolicy: IfNotPresent name: install-cni ports: - containerPort: 15014 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8000 scheme: HTTP periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: requests: cpu: 100m memory: 100Mi securityContext: capabilities: add: - NET_ADMIN - NET_RAW - SYS_PTRACE - SYS_ADMIN - DAC_OVERRIDE drop: - ALL privileged: false runAsGroup: 0 runAsNonRoot: false runAsUser: 0 seLinuxOptions: type: spc_t terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /host/opt/cni/bin name: cni-bin-dir - mountPath: /host/proc name: cni-host-procfs readOnly: true - mountPath: /host/etc/cni/net.d name: cni-net-dir - mountPath: /var/run/istio-cni name: cni-socket-dir dnsPolicy: ClusterFirst nodeSelector: kubernetes.io/os: linux priorityClassName: system-node-critical restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: istio-cni serviceAccountName: istio-cni terminationGracePeriodSeconds: 5 tolerations: - effect: NoSchedule operator: Exists - key: CriticalAddonsOnly operator: Exists - effect: NoExecute operator: Exists volumes: - hostPath: path: /var/lib/cni/bin type: "" name: cni-bin-dir - hostPath: path: /proc type: Directory name: cni-host-procfs - hostPath: path: /etc/cni/multus/net.d type: "" name: cni-net-dir - hostPath: path: /var/run/istio-cni type: "" name: cni-socket-dir - hostPath: path: /var/run/netns type: DirectoryOrCreate name: cni-netns-dir updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate status: currentNumberScheduled: 6 desiredNumberScheduled: 6 numberMisscheduled: 0 numberReady: 0 numberUnavailable: 6 observedGeneration: 1 updatedNumberScheduled: 6 =====Events in istio-cni=====: LAST SEEN TYPE REASON OBJECT MESSAGE 5s Normal Scheduled pod/istio-cni-node-9sdgk Successfully assigned istio-cni/istio-cni-node-9sdgk to ip-10-0-63-151.us-west-2.compute.internal 4s Normal AddedInterface pod/istio-cni-node-9sdgk Add eth0 [10.130.0.66/23] from ovn-kubernetes 4s Normal Pulling pod/istio-cni-node-9sdgk Pulling image "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806" 5s Normal Scheduled pod/istio-cni-node-jhllc Successfully assigned istio-cni/istio-cni-node-jhllc to ip-10-0-3-211.us-west-2.compute.internal 5s Normal AddedInterface pod/istio-cni-node-jhllc Add eth0 [10.131.0.31/23] from ovn-kubernetes 5s Normal Pulling pod/istio-cni-node-jhllc Pulling image "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806" 5s Normal Scheduled pod/istio-cni-node-vhch7 Successfully assigned istio-cni/istio-cni-node-vhch7 to ip-10-0-105-179.us-west-2.compute.internal 4s Normal AddedInterface pod/istio-cni-node-vhch7 Add eth0 [10.129.0.78/23] from ovn-kubernetes 4s Normal Pulling pod/istio-cni-node-vhch7 Pulling image "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806" 5s Normal Scheduled pod/istio-cni-node-wqm6x Successfully assigned istio-cni/istio-cni-node-wqm6x to ip-10-0-31-248.us-west-2.compute.internal 5s Normal AddedInterface pod/istio-cni-node-wqm6x Add eth0 [10.129.2.25/23] from ovn-kubernetes 4s Normal Pulling pod/istio-cni-node-wqm6x Pulling image "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806" 5s Normal Scheduled pod/istio-cni-node-xj9gq Successfully assigned istio-cni/istio-cni-node-xj9gq to ip-10-0-91-250.us-west-2.compute.internal 4s Normal AddedInterface pod/istio-cni-node-xj9gq Add eth0 [10.128.2.28/23] from ovn-kubernetes 4s Normal Pulling pod/istio-cni-node-xj9gq Pulling image "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806" 5s Normal Scheduled pod/istio-cni-node-z5gfh Successfully assigned istio-cni/istio-cni-node-z5gfh to ip-10-0-51-222.us-west-2.compute.internal 4s Normal AddedInterface pod/istio-cni-node-z5gfh Add eth0 [10.128.0.94/23] from ovn-kubernetes 4s Normal Pulling pod/istio-cni-node-z5gfh Pulling image "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806" 5s Normal SuccessfulCreate daemonset/istio-cni-node Created pod: istio-cni-node-jhllc 5s Normal SuccessfulCreate daemonset/istio-cni-node Created pod: istio-cni-node-wqm6x 5s Normal SuccessfulCreate daemonset/istio-cni-node Created pod: istio-cni-node-z5gfh 5s Normal SuccessfulCreate daemonset/istio-cni-node Created pod: istio-cni-node-vhch7 5s Normal SuccessfulCreate daemonset/istio-cni-node Created pod: istio-cni-node-9sdgk 5s Normal SuccessfulCreate daemonset/istio-cni-node Created pod: istio-cni-node-xj9gq =====Pods in istio-cni=====: NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES istio-cni-node-9sdgk 0/1 ContainerCreating 0 6s ip-10-0-63-151.us-west-2.compute.internal istio-cni-node-jhllc 0/1 ContainerCreating 0 6s ip-10-0-3-211.us-west-2.compute.internal istio-cni-node-vhch7 0/1 ContainerCreating 0 6s ip-10-0-105-179.us-west-2.compute.internal istio-cni-node-wqm6x 0/1 ContainerCreating 0 6s ip-10-0-31-248.us-west-2.compute.internal istio-cni-node-xj9gq 0/1 ContainerCreating 0 6s ip-10-0-91-250.us-west-2.compute.internal istio-cni-node-z5gfh 0/1 ContainerCreating 0 6s ip-10-0-51-222.us-west-2.compute.internal =====Istio CNI DaemonSet describe=====: Name: istio-cni-node Selector: k8s-app=istio-cni-node Node-Selector: kubernetes.io/os=linux Labels: app.kubernetes.io/instance=istio-cni app.kubernetes.io/managed-by=Helm app.kubernetes.io/name=istio-cni app.kubernetes.io/part-of=istio app.kubernetes.io/version=1.27.5 helm.sh/chart=cni-1.27.5 istio.io/rev=default k8s-app=istio-cni-node managed-by=sail-operator operator.istio.io/component=Cni release=istio-cni Annotations: deprecated.daemonset.template.generation: 1 meta.helm.sh/release-name: istio-cni meta.helm.sh/release-namespace: istio-cni Desired Number of Nodes Scheduled: 6 Current Number of Nodes Scheduled: 6 Number of Nodes Scheduled with Up-to-date Pods: 6 Number of Nodes Scheduled with Available Pods: 0 Number of Nodes Misscheduled: 0 Pods Status: 0 Running / 6 Waiting / 0 Succeeded / 0 Failed Pod Template: Labels: app.kubernetes.io/instance=istio-cni app.kubernetes.io/managed-by=Helm app.kubernetes.io/name=istio-cni app.kubernetes.io/part-of=istio app.kubernetes.io/version=1.27.5 helm.sh/chart=cni-1.27.5 istio.io/dataplane-mode=none k8s-app=istio-cni-node sidecar.istio.io/inject=false Annotations: container.apparmor.security.beta.kubernetes.io/install-cni: unconfined prometheus.io/path: /metrics prometheus.io/port: 15014 prometheus.io/scrape: true sidecar.istio.io/inject: false Service Account: istio-cni Containers: install-cni: Image: registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:2929b7df3da8228a728945542647ec5450c0585a2ed5cbdb84f8e3d81ab41806 Port: 15014/TCP Host Port: 0/TCP Command: install-cni Args: --log_output_level=info Requests: cpu: 100m memory: 100Mi Readiness: http-get http://:8000/readyz delay=0s timeout=1s period=10s #success=1 #failure=3 Environment Variables from: istio-cni-config ConfigMap Optional: false Environment: REPAIR_NODE_NAME: (v1:spec.nodeName) REPAIR_RUN_AS_DAEMON: true REPAIR_SIDECAR_ANNOTATION: sidecar.istio.io/status ALLOW_SWITCH_TO_HOST_NS: true NODE_NAME: (v1:spec.nodeName) GOMEMLIMIT: node allocatable (limits.memory) GOMAXPROCS: node allocatable (limits.cpu) POD_NAME: (v1:metadata.name) POD_NAMESPACE: (v1:metadata.namespace) Mounts: /host/etc/cni/net.d from cni-net-dir (rw) /host/opt/cni/bin from cni-bin-dir (rw) /host/proc from cni-host-procfs (ro) /var/run/istio-cni from cni-socket-dir (rw) Volumes: cni-bin-dir: Type: HostPath (bare host directory volume) Path: /var/lib/cni/bin HostPathType: cni-host-procfs: Type: HostPath (bare host directory volume) Path: /proc HostPathType: Directory cni-net-dir: Type: HostPath (bare host directory volume) Path: /etc/cni/multus/net.d HostPathType: cni-socket-dir: Type: HostPath (bare host directory volume) Path: /var/run/istio-cni HostPathType: cni-netns-dir: Type: HostPath (bare host directory volume) Path: /var/run/netns HostPathType: DirectoryOrCreate Priority Class Name: system-node-critical Node-Selectors: kubernetes.io/os=linux Tolerations: :NoSchedule op=Exists :NoExecute op=Exists CriticalAddonsOnly op=Exists Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal SuccessfulCreate 6s daemonset-controller Created pod: istio-cni-node-jhllc Normal SuccessfulCreate 6s daemonset-controller Created pod: istio-cni-node-wqm6x Normal SuccessfulCreate 6s daemonset-controller Created pod: istio-cni-node-z5gfh Normal SuccessfulCreate 6s daemonset-controller Created pod: istio-cni-node-vhch7 Normal SuccessfulCreate 6s daemonset-controller Created pod: istio-cni-node-9sdgk Normal SuccessfulCreate 6s daemonset-controller Created pod: istio-cni-node-xj9gq =====Istio CNI logs=====: error executing command: /usr/bin/sh -c oc -n istio-cni logs daemonset/istio-cni-node --since=2m0s: Found 6 pods, using pod/istio-cni-node-9sdgk Error from server (BadRequest): container "install-cni" in pod "istio-cni-node-9sdgk" is waiting to start: ContainerCreating ========================================================= =====CA certs in istio-system=====: error getting secret: error executing command: /usr/bin/sh -c oc -n istio-system get secret cacerts -o yaml: Error from server (NotFound): namespaces "istio-system" not found , output Error from server (NotFound): namespaces "istio-system" not found ========================================================= =====Namespace sleep (not found)=====: error getting yaml: error executing command: /usr/bin/sh -c oc get namespace sleep -o yaml: Error from server (NotFound): namespaces "sleep" not found , output: Error from server (NotFound): namespaces "sleep" not found =====Namespace httpbin (not found)=====: error getting yaml: error executing command: /usr/bin/sh -c oc get namespace httpbin -o yaml: Error from server (NotFound): namespaces "httpbin" not found , output: Error from server (NotFound): namespaces "httpbin" not found =====Namespace sample (not found)=====: error getting yaml: error executing command: /usr/bin/sh -c oc get namespace sample -o yaml: Error from server (NotFound): namespaces "sample" not found , output: Error from server (NotFound): namespaces "sample" not found ========================================================= STEP: Cleaning up the istio-cni Namespace @ 02/24/26 04:05:47.647 STEP: Cleaning up the istio-system1 Namespace @ 02/24/26 04:05:47.71 STEP: Cleaning up the istio-system2 Namespace @ 02/24/26 04:05:47.775 STEP: Cleaning up the istio-cni ClusterRole @ 02/24/26 04:05:47.838 STEP: Cleaning up the istio-cni-repair-role ClusterRole @ 02/24/26 04:05:47.904 STEP: Cleaning up the istio-cni ClusterRoleBinding @ 02/24/26 04:05:47.97 STEP: Cleaning up the istio-cni-repair-rolebinding ClusterRoleBinding @ 02/24/26 04:05:48.035 STEP: Waiting for resources to be deleted @ 02/24/26 04:05:48.101 * Finished cleaning up resources • [FAILED] [18.856 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation [It] Installs IstioCNI [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:61 [FAILED] IstioCNI creation failed Expected success, but got an error: <*fmt.wrapError | 0xc0033078c0>: error creating resource from yaml: error executing command: /usr/bin/sh -c oc create -f -: Error from server (AlreadyExists): error when creating "STDIN": istiocnis.sailoperator.io "default" already exists { msg: "error creating resource from yaml: error executing command: /usr/bin/sh -c oc create -f -: Error from server (AlreadyExists): error when creating \"STDIN\": istiocnis.sailoperator.io \"default\" already exists\n", err: <*errors.errorString | 0xc000c0c960>{ s: "error executing command: /usr/bin/sh -c oc create -f -: Error from server (AlreadyExists): error when creating \"STDIN\": istiocnis.sailoperator.io \"default\" already exists\n", }, } In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/util/common/e2e_utils.go:437 @ 02/24/26 04:05:38.565 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Installs Istios [It] Mesh 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:70 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:70 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Installs Istios [It] Mesh 2 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:71 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:71 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Waits for Istios [It] Mesh 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:100 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:100 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Waits for Istios [It] Mesh 2 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:101 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:101 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Deploys applications [It] App 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:113 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:113 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Deploys applications [It] App 2a [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:114 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:114 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Deploys applications [It] App 2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:115 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:115 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Waits for apps to be ready [It] App 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:132 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:132 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Waits for apps to be ready [It] App 2a [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:133 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:133 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation Waits for apps to be ready [It] App 2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:134 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:134 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Verification [It] Verifies app2a cannot connect to app1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:145 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:145 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.27.3 Verification [It] Verifies app2a can connect to app2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:153 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:153 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation [It] Sets up namespaces [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:52 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:52 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation [It] Installs IstioCNI [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:61 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:61 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Installs Istios [It] Mesh 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:70 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:70 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Installs Istios [It] Mesh 2 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:71 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:71 @ 02/24/26 04:05:57.147 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Waits for Istios [It] Mesh 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:100 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:100 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Waits for Istios [It] Mesh 2 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:101 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:101 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Deploys applications [It] App 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:113 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:113 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Deploys applications [It] App 2a [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:114 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:114 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Deploys applications [It] App 2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:115 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:115 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Waits for apps to be ready [It] App 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:132 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:132 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Waits for apps to be ready [It] App 2a [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:133 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:133 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Installation Waits for apps to be ready [It] App 2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:134 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:134 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Verification [It] Verifies app2a cannot connect to app1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:145 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:145 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.26.6 Verification [It] Verifies app2a can connect to app2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:153 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:153 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation [It] Sets up namespaces [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:52 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:52 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation [It] Installs IstioCNI [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:61 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:61 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Installs Istios [It] Mesh 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:70 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:70 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Installs Istios [It] Mesh 2 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:71 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:71 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Waits for Istios [It] Mesh 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:100 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:100 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Waits for Istios [It] Mesh 2 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:101 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:101 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Deploys applications [It] App 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:113 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:113 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Deploys applications [It] App 2a [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:114 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:114 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Deploys applications [It] App 2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:115 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:115 @ 02/24/26 04:05:57.148 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Waits for apps to be ready [It] App 1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:132 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:132 @ 02/24/26 04:05:57.149 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Waits for apps to be ready [It] App 2a [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:133 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:133 @ 02/24/26 04:05:57.149 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Installation Waits for apps to be ready [It] App 2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:134 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:134 @ 02/24/26 04:05:57.149 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Verification [It] Verifies app2a cannot connect to app1 [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:145 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:145 @ 02/24/26 04:05:57.149 ------------------------------ S [SKIPPED] [0.000 seconds] Multi control plane deployment model for supported versions Istio version 1.24.6 Verification [It] Verifies app2a can connect to app2b [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:153 [SKIPPED] Spec skipped because an earlier spec in an ordered container failed In [It] at: /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicontrolplane/multi_control_plane_test.go:153 @ 02/24/26 04:05:57.149 ------------------------------ [ReportAfterSuite] Autogenerated ReportAfterSuite for --junit-report autogenerated by Ginkgo [ReportAfterSuite] PASSED [0.003 seconds] ------------------------------ Summarizing 1 Failure: [FAIL] Multi control plane deployment model for supported versions Istio version 1.27.3 Installation [It] Installs IstioCNI [smoke, multicontrol-plane] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/util/common/e2e_utils.go:437 Ran 2 of 42 Specs in 22.496 seconds FAIL! -- 1 Passed | 1 Failed | 0 Pending | 40 Skipped --- FAIL: TestMultiControlPlane (22.50s) FAIL ************ Running Setup ************ Initializing k8s client Running Suite: Operator Installation Test Suite - /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/operator ============================================================================================================================ Random Seed: 1771905703 Will run 5 of 5 specs ------------------------------ Operator installation deploys all the CRDs [smoke, operator] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/operator/operator_install_test.go:69 * Istio CRDs are present • [2.554 seconds] ------------------------------ Operator installation updates the CRDs status to Established [smoke, operator] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/operator/operator_install_test.go:76 * CRDs are Established • [1.440 seconds] ------------------------------ Operator installation istio crd is present [smoke, operator] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/operator/operator_install_test.go:84 * Istio CRD is present • [0.143 seconds] ------------------------------ Operator installation starts successfully [smoke, operator] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/operator/operator_install_test.go:91 • [0.060 seconds] ------------------------------ Operator installation serves metrics securely [smoke, operator] /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/operator/operator_install_test.go:96 STEP: creating a ClusterRoleBinding for the service account to allow access to metrics @ 02/24/26 04:06:01.373 STEP: validating that the metrics service is available @ 02/24/26 04:06:01.634 STEP: getting the service account token @ 02/24/26 04:06:01.905 STEP: waiting for the metrics endpoint to be ready @ 02/24/26 04:06:02.128 STEP: verifying that the controller manager is serving the metrics server @ 02/24/26 04:06:02.39 STEP: creating the curl-metrics namespace @ 02/24/26 04:06:02.896 STEP: creating the curl-metrics pod to access the metrics endpoint @ 02/24/26 04:06:03.15 STEP: waiting for the curl-metrics pod to complete. @ 02/24/26 04:06:03.422 STEP: getting the metrics by checking curl-metrics logs @ 02/24/26 04:06:09.781 STEP: getting the curl-metrics logs @ 02/24/26 04:06:09.781 STEP: Cleaning up the curl-metrics Namespace @ 02/24/26 04:06:12.363 STEP: Cleaning up the metrics-reader-rolebinding ClusterRoleBinding @ 02/24/26 04:06:12.427 STEP: Waiting for resources to be deleted @ 02/24/26 04:06:12.49 * Finished cleaning up resources • [17.710 seconds] ------------------------------ [ReportAfterSuite] Autogenerated ReportAfterSuite for --junit-report autogenerated by Ginkgo [ReportAfterSuite] PASSED [0.001 seconds] ------------------------------ Ran 5 of 5 Specs in 21.909 seconds SUCCESS! -- 5 Passed | 0 Failed | 0 Pending | 0 Skipped PASS Could not open /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/dualstack/go/src/github.com/openshift-service-mesh/sail-operator/test_artifacts/report.xml: open /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/dualstack/go/src/github.com/openshift-service-mesh/sail-operator/test_artifacts/report.xml: no such file or directory Could not open /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicluster/go/src/github.com/openshift-service-mesh/sail-operator/test_artifacts/report.xml: open /go/src/github.com/openshift-service-mesh/sail-operator/tests/e2e/multicluster/go/src/github.com/openshift-service-mesh/sail-operator/test_artifacts/report.xml: no such file or directory Ginkgo ran 7 suites in 4m35.671389067s There were failures detected in the following suites:  controlplane ./tests/e2e/controlplane multicontrolplane ./tests/e2e/multicontrolplane Test Suite Failed exit status 1 JUnit report: /go/src/github.com/openshift-service-mesh/sail-operator/test_artifacts/report.xml JUnit report: /go/src/github.com/openshift-service-mesh/sail-operator/test_artifacts/report.xml make: *** [Makefile.core.mk:223: test.e2e.ocp] Error 1 Patching Tests Result File: /logs/artifacts/junit-sail-e2e.xml Checking if yq exists yq version: yq (https://github.com/mikefarah/yq/) version v4.45.4 Mapping Test Suite Name To: ServiceMesh-lp-interop