2026-11-08T04:19:55.898749Z warn OS CA Cert could not be found for agent Istio Pilot agent runs in the sidecar or gateway container and bootstraps Envoy. Usage: pilot-agent [command] Available Commands: completion Generate the autocompletion script for the specified shell help Help about any command istio-iptables Set up iptables rules for Istio Sidecar proxy XDS proxy agent request Makes an HTTP request to the Envoy admin API version Prints out build version information wait Waits until the Envoy proxy is ready Flags: -h, --help help for pilot-agent --log_as_json Whether to format output as JSON or in plain console-friendly format --log_caller string Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, all, ca, cache, citadelclient, default, dns, gcecred, grpc, healthcheck, klog, mockcred, monitoring, probes, sds, security, spiffe, validation, wasm, xdsproxy] --log_output_level string Comma-separated minimum per-scope logging level of messages to output, in the form of :,:,... where scope can be one of [ads, all, ca, cache, citadelclient, default, dns, gcecred, grpc, healthcheck, klog, mockcred, monitoring, probes, sds, security, spiffe, validation, wasm, xdsproxy] and level can be one of [debug, info, warn, error, fatal, none] --log_stacktrace_level string Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of :,,... where scope can be one of [ads, all, ca, cache, citadelclient, default, dns, gcecred, grpc, healthcheck, klog, mockcred, monitoring, probes, sds, security, spiffe, validation, wasm, xdsproxy] and level can be one of [debug, info, warn, error, fatal, none] (default "default:none") --log_target stringArray The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default [stdout]) --vklog Level number for the log level verbosity. Like -v flag. ex: --vklog=9 Use "pilot-agent [command] --help" for more information about a command.