I0629 21:59:47.486707       1 cmd.go:253] Using service-serving-cert provided certificates
I0629 21:59:47.486776       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0629 21:59:47.487013       1 observer_polling.go:159] Starting file observer
I0629 21:59:47.487317       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0629 21:59:47.487328       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0629 21:59:47.570842       1 builder.go:304] service-ca-operator version v4.18.0-202504090803.p0.g30efb52.assembly.stream.el9-0-gf72aef6-
I0629 21:59:47.571298       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key"
I0629 21:59:47.729207       1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController
I0629 21:59:47.735793       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0629 21:59:47.735810       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0629 21:59:47.735830       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0629 21:59:47.735837       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0629 21:59:47.739117       1 secure_serving.go:57] Forcing use of http/1.1 only
I0629 21:59:47.739142       1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0629 21:59:47.739446       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0629 21:59:47.739457       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0629 21:59:47.739460       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0629 21:59:47.739465       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0629 21:59:47.739467       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0629 21:59:47.739470       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0629 21:59:47.745635       1 leaderelection.go:254] attempting to acquire leader lease openshift-service-ca-operator/service-ca-operator-lock...
I0629 21:59:47.745812       1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController
I0629 21:59:47.745822       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0629 21:59:47.745816       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0629 21:59:47.745843       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0629 21:59:47.745844       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0629 21:59:47.745844       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0629 21:59:47.746130       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key"
I0629 21:59:47.746172       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-service-ca-operator.svc\" [serving] validServingFor=[metrics.openshift-service-ca-operator.svc,metrics.openshift-service-ca-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1782770308\" (2026-06-29 21:58:40 +0000 UTC to 2028-06-28 21:58:41 +0000 UTC (now=2026-06-29 21:59:47.746141584 +0000 UTC))"
I0629 21:59:47.746354       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782770387\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782770387\" (2026-06-29 20:59:47 +0000 UTC to 2027-06-29 20:59:47 +0000 UTC (now=2026-06-29 21:59:47.746331932 +0000 UTC))"
I0629 21:59:47.746379       1 secure_serving.go:213] Serving securely on [::]:8443
I0629 21:59:47.746405       1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated
I0629 21:59:47.746427       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0629 21:59:47.749848       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175
I0629 21:59:47.750651       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209
I0629 21:59:47.750723       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209
I0629 21:59:47.764654       1 leaderelection.go:268] successfully acquired lease openshift-service-ca-operator/service-ca-operator-lock
I0629 21:59:47.764704       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca-operator", Name:"service-ca-operator-lock", UID:"0015a767-6641-428a-a4c5-8d072d4f8953", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"13247", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-operator-565f7cf679-jl25g_3f2c57ef-dc58-41e1-af0b-1061fb19c491 became leader
I0629 21:59:47.765411       1 base_controller.go:76] Waiting for caches to sync for resource-sync
I0629 21:59:47.765442       1 base_controller.go:76] Waiting for caches to sync for LoggingSyncer
I0629 21:59:47.765458       1 base_controller.go:76] Waiting for caches to sync for ServiceCAOperator
I0629 21:59:47.765601       1 base_controller.go:76] Waiting for caches to sync for StatusSyncer_service-ca
I0629 21:59:47.777736       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.777742       1 reflector.go:368] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.778725       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.778751       1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779127       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779128       1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779201       1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779241       1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779643       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779681       1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.779827       1 reflector.go:368] Caches populated for *v1.Infrastructure from github.com/openshift/client-go/config/informers/externalversions/factory.go:125
I0629 21:59:47.779894       1 reflector.go:368] Caches populated for *v1.ServiceCA from github.com/openshift/client-go/operator/informers/externalversions/factory.go:125
I0629 21:59:47.786767       1 reflector.go:368] Caches populated for *v1.ClusterOperator from github.com/openshift/client-go/config/informers/externalversions/factory.go:125
I0629 21:59:47.806781       1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160
I0629 21:59:47.846634       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0629 21:59:47.846653       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0629 21:59:47.846670       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0629 21:59:47.846824       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:43 +0000 UTC to 2036-06-26 21:46:43 +0000 UTC (now=2026-06-29 21:59:47.846798913 +0000 UTC))"
I0629 21:59:47.846948       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-service-ca-operator.svc\" [serving] validServingFor=[metrics.openshift-service-ca-operator.svc,metrics.openshift-service-ca-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1782770308\" (2026-06-29 21:58:40 +0000 UTC to 2028-06-28 21:58:41 +0000 UTC (now=2026-06-29 21:59:47.846936321 +0000 UTC))"
I0629 21:59:47.847050       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782770387\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782770387\" (2026-06-29 20:59:47 +0000 UTC to 2027-06-29 20:59:47 +0000 UTC (now=2026-06-29 21:59:47.847039709 +0000 UTC))"
I0629 21:59:47.847150       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:44 +0000 UTC to 2036-06-26 21:46:44 +0000 UTC (now=2026-06-29 21:59:47.847141534 +0000 UTC))"
I0629 21:59:47.847166       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:44 +0000 UTC to 2036-06-26 21:46:44 +0000 UTC (now=2026-06-29 21:59:47.847158731 +0000 UTC))"
I0629 21:59:47.847178       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:45 +0000 UTC to 2036-06-26 21:46:45 +0000 UTC (now=2026-06-29 21:59:47.84717229 +0000 UTC))"
I0629 21:59:47.847190       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:46 +0000 UTC to 2036-06-26 21:46:46 +0000 UTC (now=2026-06-29 21:59:47.847183979 +0000 UTC))"
I0629 21:59:47.847201       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:47 +0000 UTC to 2036-06-26 21:46:47 +0000 UTC (now=2026-06-29 21:59:47.84719553 +0000 UTC))"
I0629 21:59:47.847212       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r89gr5bvgt2nqijn7sqvip3obr3jvq1-kx-5cf124db70_customer-system-admin-signer@1782769617\" [] issuer=\"<self>\" (2026-06-29 21:46:56 +0000 UTC to 2026-07-06 21:46:57 +0000 UTC (now=2026-06-29 21:59:47.847205405 +0000 UTC))"
I0629 21:59:47.847224       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r89gr5bvgt2nqijn7sqvip3obr3jvq1-kx-5cf124db70_sre-system-admin-signer@1782769617\" [] issuer=\"<self>\" (2026-06-29 21:46:57 +0000 UTC to 2026-07-06 21:46:58 +0000 UTC (now=2026-06-29 21:59:47.847217659 +0000 UTC))"
I0629 21:59:47.847235       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-06-29 21:46:43 +0000 UTC to 2036-06-26 21:46:43 +0000 UTC (now=2026-06-29 21:59:47.84722995 +0000 UTC))"
I0629 21:59:47.847330       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-service-ca-operator.svc\" [serving] validServingFor=[metrics.openshift-service-ca-operator.svc,metrics.openshift-service-ca-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1782770308\" (2026-06-29 21:58:40 +0000 UTC to 2028-06-28 21:58:41 +0000 UTC (now=2026-06-29 21:59:47.847320993 +0000 UTC))"
I0629 21:59:47.847408       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782770387\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782770387\" (2026-06-29 20:59:47 +0000 UTC to 2027-06-29 20:59:47 +0000 UTC (now=2026-06-29 21:59:47.847400698 +0000 UTC))"
I0629 21:59:47.865891       1 base_controller.go:82] Caches are synced for StatusSyncer_service-ca 
I0629 21:59:47.865909       1 base_controller.go:119] Starting #1 worker of StatusSyncer_service-ca controller ...
I0629 21:59:47.865964       1 base_controller.go:82] Caches are synced for LoggingSyncer 
I0629 21:59:47.865998       1 base_controller.go:119] Starting #1 worker of LoggingSyncer controller ...
I0629 21:59:47.865994       1 base_controller.go:82] Caches are synced for resource-sync 
I0629 21:59:47.866011       1 base_controller.go:119] Starting #1 worker of resource-sync controller ...
I0629 21:59:47.970618       1 reflector.go:368] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160
I0629 21:59:48.171781       1 reflector.go:368] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160
I0629 21:59:48.265748       1 base_controller.go:82] Caches are synced for ServiceCAOperator 
I0629 21:59:48.265775       1 base_controller.go:119] Starting #1 worker of ServiceCAOperator controller ...