W0629 14:23:51.610118 1 cmd.go:257] Using insecure, self-signed certificates I0629 14:23:51.610298 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782743031 cert, and key in /tmp/serving-cert-2367483028/serving-signer.crt, /tmp/serving-cert-2367483028/serving-signer.key I0629 14:23:51.825991 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0629 14:23:51.826262 1 observer_polling.go:159] Starting file observer I0629 14:23:51.826493 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0629 14:23:51.826505 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0629 14:23:51.861784 1 builder.go:304] service-ca-controller version v4.18.0-202504090803.p0.g30efb52.assembly.stream.el9-0-gf72aef6- I0629 14:23:51.862257 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2367483028/tls.crt::/tmp/serving-cert-2367483028/tls.key" I0629 14:23:52.307634 1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController I0629 14:23:52.313471 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0629 14:23:52.313483 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0629 14:23:52.313497 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0629 14:23:52.313504 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0629 14:23:52.315982 1 secure_serving.go:57] Forcing use of http/1.1 only I0629 14:23:52.315993 1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0629 14:23:52.315996 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0629 14:23:52.316001 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0629 14:23:52.316005 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0629 14:23:52.316008 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0629 14:23:52.316009 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0629 14:23:52.316011 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0629 14:23:52.321507 1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController I0629 14:23:52.321521 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0629 14:23:52.321524 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0629 14:23:52.321542 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0629 14:23:52.321542 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0629 14:23:52.321552 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0629 14:23:52.321644 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2367483028/tls.crt::/tmp/serving-cert-2367483028/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782743031\" (2026-06-29 14:23:50 +0000 UTC to 2026-07-29 14:23:51 +0000 UTC (now=2026-06-29 14:23:52.321625916 +0000 UTC))" I0629 14:23:52.321723 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2367483028/tls.crt::/tmp/serving-cert-2367483028/tls.key" I0629 14:23:52.321733 1 leaderelection.go:254] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0629 14:23:52.321734 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782743032\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782743031\" (2026-06-29 13:23:51 +0000 UTC to 2027-06-29 13:23:51 +0000 UTC (now=2026-06-29 14:23:52.321721404 +0000 UTC))" I0629 14:23:52.321806 1 secure_serving.go:213] Serving securely on [::]:8443 I0629 14:23:52.321815 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0629 14:23:52.321824 1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated I0629 14:23:52.325857 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0629 14:23:52.325859 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0629 14:23:52.325862 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175 I0629 14:23:52.335657 1 leaderelection.go:268] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0629 14:23:52.335717 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"f4f1f6e3-5402-44ae-b4e2-bc93589b433b", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11421", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-6549cb95df-qnzxl_52782fa3-ef22-41ae-a4f9-0bbce27d00e7 became leader I0629 14:23:52.336319 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0629 14:23:52.336338 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0629 14:23:52.336346 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0629 14:23:52.336347 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0629 14:23:52.336354 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0629 14:23:52.336397 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0629 14:23:52.336699 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0629 14:23:52.336749 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0629 14:23:52.340104 1 reflector.go:368] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0629 14:23:52.342130 1 reflector.go:368] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0629 14:23:52.342612 1 reflector.go:368] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0629 14:23:52.343931 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0629 14:23:52.384251 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0629 14:23:52.421568 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0629 14:23:52.421594 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0629 14:23:52.421603 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0629 14:23:52.421760 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-06-29 14:07:57 +0000 UTC to 2036-06-26 14:07:57 +0000 UTC (now=2026-06-29 14:23:52.4217321 +0000 UTC))" I0629 14:23:52.421918 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2367483028/tls.crt::/tmp/serving-cert-2367483028/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782743031\" (2026-06-29 14:23:50 +0000 UTC to 2026-07-29 14:23:51 +0000 UTC (now=2026-06-29 14:23:52.421907592 +0000 UTC))" I0629 14:23:52.422011 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782743032\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782743031\" (2026-06-29 13:23:51 +0000 UTC to 2027-06-29 13:23:51 +0000 UTC (now=2026-06-29 14:23:52.422001946 +0000 UTC))" I0629 14:23:52.422095 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-06-29 14:07:57 +0000 UTC to 2036-06-26 14:07:57 +0000 UTC (now=2026-06-29 14:23:52.422087756 +0000 UTC))" I0629 14:23:52.422108 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-06-29 14:07:58 +0000 UTC to 2036-06-26 14:07:58 +0000 UTC (now=2026-06-29 14:23:52.42210248 +0000 UTC))" I0629 14:23:52.422117 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-06-29 14:07:59 +0000 UTC to 2036-06-26 14:07:59 +0000 UTC (now=2026-06-29 14:23:52.422111705 +0000 UTC))" I0629 14:23:52.422126 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-06-29 14:08:00 +0000 UTC to 2036-06-26 14:08:00 +0000 UTC (now=2026-06-29 14:23:52.422120934 +0000 UTC))" I0629 14:23:52.422137 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-06-29 14:08:01 +0000 UTC to 2036-06-26 14:08:01 +0000 UTC (now=2026-06-29 14:23:52.422132079 +0000 UTC))" I0629 14:23:52.422148 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r82plbb45idmvag2ls3gt8kdqvgfaph-kx-d883712a87_customer-system-admin-signer@1782742091\" [] issuer=\"\" (2026-06-29 14:08:11 +0000 UTC to 2026-07-06 14:08:12 +0000 UTC (now=2026-06-29 14:23:52.42214087 +0000 UTC))" I0629 14:23:52.422161 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r82plbb45idmvag2ls3gt8kdqvgfaph-kx-d883712a87_sre-system-admin-signer@1782742091\" [] issuer=\"\" (2026-06-29 14:08:10 +0000 UTC to 2026-07-06 14:08:11 +0000 UTC (now=2026-06-29 14:23:52.422154196 +0000 UTC))" I0629 14:23:52.422169 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-06-29 14:07:57 +0000 UTC to 2036-06-26 14:07:57 +0000 UTC (now=2026-06-29 14:23:52.422164243 +0000 UTC))" I0629 14:23:52.422246 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2367483028/tls.crt::/tmp/serving-cert-2367483028/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782743031\" (2026-06-29 14:23:50 +0000 UTC to 2026-07-29 14:23:51 +0000 UTC (now=2026-06-29 14:23:52.422238408 +0000 UTC))" I0629 14:23:52.422320 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782743032\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782743031\" (2026-06-29 13:23:51 +0000 UTC to 2027-06-29 13:23:51 +0000 UTC (now=2026-06-29 14:23:52.422312833 +0000 UTC))" I0629 14:23:52.436369 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0629 14:23:52.436393 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0629 14:23:52.436398 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0629 14:23:52.436401 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0629 14:23:52.436403 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0629 14:23:52.436407 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0629 14:23:52.436372 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0629 14:23:52.436422 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0629 14:23:52.436425 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0629 14:23:52.436427 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0629 14:23:52.436429 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0629 14:23:52.436432 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0629 14:23:52.436467 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0629 14:23:52.436472 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0629 14:23:52.436475 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0629 14:23:52.436477 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0629 14:23:52.436479 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0629 14:23:52.436481 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0629 14:23:52.436497 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0629 14:23:52.436825 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0629 14:23:52.436833 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0629 14:23:52.436837 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0629 14:23:52.436840 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0629 14:23:52.436844 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0629 14:23:52.436846 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0629 14:23:52.436874 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0629 14:23:52.436880 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0629 14:23:52.437078 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0629 14:23:52.437750 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0629 14:23:52.437755 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0629 14:23:52.437761 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0629 14:23:52.441038 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0629 14:23:52.474808 1 reflector.go:368] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0629 14:23:52.536587 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0629 14:23:52.536604 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0629 14:23:52.536603 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0629 14:23:52.536611 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0629 14:23:52.536614 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0629 14:23:52.536615 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0629 14:23:52.536621 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0629 14:23:52.536613 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0629 14:23:52.536629 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 14:23:52.536634 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 14:23:52.536637 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 14:23:52.536637 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0629 14:23:52.536640 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 14:23:52.536638 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.536644 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 14:23:52.536624 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0629 14:23:52.536660 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0629 14:23:52.536662 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0629 14:23:52.536676 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.536704 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.536616 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0629 14:23:52.536767 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.537020 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... W0629 14:23:52.537051 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0629 14:23:52.537090 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.552171 1 configmap.go:109] updating configmap open-cluster-management-2r82plbb45idmvag2ls3gt8kdqvgfaph/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.552218 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.556519 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.557568 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.559235 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.567682 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0629 14:23:52.568628 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.571397 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.571454 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.578244 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.752515 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:52.949615 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:53.156311 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:53.350537 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:53.548777 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:53.749194 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:53.949273 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:54.150201 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:54.350669 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:54.549870 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:54.751180 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:54.948774 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:55.150652 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:55.348008 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:55.547949 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:55.750171 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:55.951635 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:56.149611 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:56.350899 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle W0629 14:23:56.549263 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0629 14:23:56.550072 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:56.750029 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:56.949958 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:57.148209 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:57.348059 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:57.549812 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:57.749552 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0629 14:23:57.958598 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:58.152285 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:58.351798 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:58.550035 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:58.749780 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:58.950183 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:59.150282 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:59.348656 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:59.550792 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0629 14:23:59.750153 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0629 14:23:59.951414 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:00.149960 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:00.350001 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:00.549953 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0629 14:24:00.750959 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:00.950499 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0629 14:24:01.150064 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:01.352555 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:01.549972 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:01.748776 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:01.952301 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:02.150697 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:02.349790 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:02.552100 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:02.750350 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:02.948229 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:03.150892 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:03.351495 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:03.548942 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:03.749665 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:03.948907 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:04.150063 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:04.351272 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:04.551586 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:04.751811 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:04.950690 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:05.151967 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:05.348910 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:05.549487 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:05.750211 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:05.948357 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:06.149181 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:06.347026 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:06.548755 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:06.748883 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:06.948271 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0629 14:24:21.999863 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0629 14:24:22.015109 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0629 14:24:27.201703 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0629 14:24:27.205562 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0629 14:24:47.493942 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0629 14:25:14.169412 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0629 14:25:44.871028 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0629 14:35:09.657568 1 configmap.go:109] updating configmap minio-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:35:13.859108 1 configmap.go:109] updating configmap product-kubearchive/openshift-service-ca.crt with the service signing CA bundle I0629 14:35:14.935114 1 configmap.go:109] updating configmap tekton-logging/openshift-service-ca.crt with the service signing CA bundle I0629 14:35:15.947948 1 configmap.go:109] updating configmap tekton-results/openshift-service-ca.crt with the service signing CA bundle E0629 14:37:00.507787 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertController\" controller failed to sync \"openshift-operators/openshift-gitops-operator-metrics-service\", err: Operation cannot be fulfilled on services \"openshift-gitops-operator-metrics-service\": the object has been modified; please apply your changes to the latest version and try again" I0629 14:37:09.249931 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:23.454919 1 configmap.go:109] updating configmap quality-dashboard/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:24.847792 1 configmap.go:109] updating configmap product-kubearchive-logging/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:27.843776 1 configmap.go:109] updating configmap application-service/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:28.814136 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:33.161767 1 configmap.go:109] updating configmap dora-metrics/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:56.644298 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:38:57.592490 1 configmap.go:109] updating configmap openshift-kueue-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:00.783841 1 configmap.go:109] updating configmap konflux-rbac/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:01.199148 1 configmap.go:109] updating configmap openshift-adp/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:02.210918 1 configmap.go:109] updating configmap internal-services/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:04.111813 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:05.166089 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:06.797012 1 configmap.go:109] updating configmap application-api/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:06.860714 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:07.079833 1 configmap.go:109] updating configmap mintmaker/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:07.868852 1 configmap.go:109] updating configmap appstudio-cardinality-exporter/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:08.778754 1 configmap.go:109] updating configmap image-rbac-proxy/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:09.200689 1 configmap.go:109] updating configmap repository-validator/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:10.118035 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:15.340056 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration application-service-mutating-webhook-configuration with the service signing CA bundle I0629 14:39:15.522502 1 admissionwebhook.go:116] updating validatingwebhookconfiguration application-service-validating-webhook-configuration with the service signing CA bundle I0629 14:39:15.746267 1 configmap.go:109] updating configmap perf-team-prometheus-reader/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:15.938242 1 configmap.go:109] updating configmap appstudio-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:16.032983 1 configmap.go:109] updating configmap konflux-kite/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:19.506941 1 configmap.go:109] updating configmap konflux-otel/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:20.657958 1 configmap.go:109] updating configmap tempo-operator/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:20.770957 1 configmap.go:109] updating configmap project-controller/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:21.350147 1 configmap.go:109] updating configmap appstudio-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:21.849961 1 configmap.go:109] updating configmap crossplane-system/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:26.828181 1 configmap.go:109] updating configmap smee-client/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:26.846055 1 configmap.go:109] updating configmap build-templates/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:26.856882 1 configmap.go:109] updating configmap build-templates-e2e/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:36.738779 1 configmap.go:109] updating configmap konflux-dummy-deploy/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:41.567009 1 configmap.go:109] updating configmap konflux-perfscale-2-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:41.721147 1 configmap.go:109] updating configmap konflux-perfscale-4-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:41.847522 1 configmap.go:109] updating configmap konflux-perfscale-3-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:41.903501 1 configmap.go:109] updating configmap konflux-perfscale-1-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:41.990737 1 configmap.go:109] updating configmap managed-konflux-perfscale-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:44.418884 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:44.834995 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0629 14:39:45.706016 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E0629 14:39:45.743956 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I0629 14:39:45.745078 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E0629 14:39:45.769261 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I0629 14:39:45.770367 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I0629 14:39:45.812207 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E0629 14:39:45.866951 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I0629 14:39:52.265667 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration integration-service-mutating-webhook-configuration with the service signing CA bundle I0629 14:39:52.326847 1 admissionwebhook.go:116] updating validatingwebhookconfiguration integration-service-validating-webhook-configuration with the service signing CA bundle I0629 14:39:52.765968 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration release-service-mutating-webhook-configuration with the service signing CA bundle I0629 14:39:52.820833 1 admissionwebhook.go:116] updating validatingwebhookconfiguration release-service-validating-webhook-configuration with the service signing CA bundle I0629 14:40:04.974568 1 configmap.go:109] updating configmap dummy-service/openshift-service-ca.crt with the service signing CA bundle I0629 14:40:06.729936 1 configmap.go:109] updating configmap tekton-kueue/openshift-service-ca.crt with the service signing CA bundle I0629 14:40:07.224004 1 configmap.go:109] updating configmap knative-eventing/openshift-service-ca.crt with the service signing CA bundle I0629 14:40:09.606747 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0629 14:40:34.382182 1 configmap.go:109] updating configmap appstudio-registry-exporter/openshift-service-ca.crt with the service signing CA bundle I0629 14:40:59.911514 1 configmap.go:109] updating configmap konflux-kyverno/openshift-service-ca.crt with the service signing CA bundle I0629 14:41:32.198743 1 configmap.go:109] updating configmap crossplane-connections/openshift-service-ca.crt with the service signing CA bundle I0629 14:41:37.821270 1 configmap.go:109] updating configmap tempo-operator/tempo-tempo-serving-cabundle with the service signing CA bundle I0629 14:41:38.671881 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0629 14:42:23.718869 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration kubearchive-mutating-webhook-configuration with the service signing CA bundle I0629 14:42:23.781996 1 admissionwebhook.go:116] updating validatingwebhookconfiguration kubearchive-validating-webhook-configuration with the service signing CA bundle I0629 14:42:32.078016 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0629 14:43:11.113997 1 configmap.go:109] updating configmap konflux-disaster-recovery/openshift-service-ca.crt with the service signing CA bundle I0629 14:43:12.474680 1 configmap.go:109] updating configmap multi-platform-controller/openshift-service-ca.crt with the service signing CA bundle I0629 14:43:23.546973 1 configmap.go:109] updating configmap konflux-policies/openshift-service-ca.crt with the service signing CA bundle I0629 14:43:27.576075 1 configmap.go:109] updating configmap caching/openshift-service-ca.crt with the service signing CA bundle W0629 14:43:52.476250 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0629 14:49:26.041901 1 configmap.go:109] updating configmap e2e-secrets/openshift-service-ca.crt with the service signing CA bundle I0629 14:50:23.524006 1 configmap.go:109] updating configmap upgrade-namespace/openshift-service-ca.crt with the service signing CA bundle I0629 14:50:23.696293 1 configmap.go:109] updating configmap chains-e2e-awrf/openshift-service-ca.crt with the service signing CA bundle I0629 14:57:37.098017 1 configmap.go:109] updating configmap dr-bc/openshift-service-ca.crt with the service signing CA bundle I0629 14:57:41.265135 1 configmap.go:109] updating configmap dr-test-moshekipod-backwards-compat-dr/openshift-service-ca.crt with the service signing CA bundle I0629 14:57:41.311948 1 configmap.go:109] updating configmap dr-test-kokohazamar-backwards-compat-dr/openshift-service-ca.crt with the service signing CA bundle I0629 14:57:43.144794 1 configmap.go:109] updating configmap dr-test-moshekipod-backwards-compat-dr-managed/openshift-service-ca.crt with the service signing CA bundle I0629 14:57:43.161998 1 configmap.go:109] updating configmap dr-test-kokohazamar-backwards-compat-dr-managed/openshift-service-ca.crt with the service signing CA bundle W0629 15:03:52.476925 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0629 15:23:52.477632 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0629 15:43:52.478927 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0629 16:03:52.479464 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"