W1009 01:44:57.788438 1 cmd.go:257] Using insecure, self-signed certificates I1009 01:44:57.788658 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1791510297 cert, and key in /tmp/serving-cert-2684208170/serving-signer.crt, /tmp/serving-cert-2684208170/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1791510297" is unset, resetting to 157680000000000000 years! I1009 01:44:57.938650 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I1009 01:44:57.938851 1 observer_polling.go:159] Starting file observer I1009 01:44:57.938944 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1009 01:44:57.938956 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I1009 01:44:57.938960 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1009 01:44:57.938963 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1009 01:44:57.966933 1 builder.go:304] service-ca-controller version - I1009 01:44:57.967433 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2684208170/tls.crt::/tmp/serving-cert-2684208170/tls.key" I1009 01:44:58.138589 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I1009 01:44:58.144322 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I1009 01:44:58.144338 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I1009 01:44:58.144351 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I1009 01:44:58.144355 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I1009 01:44:58.147088 1 secure_serving.go:57] Forcing use of http/1.1 only I1009 01:44:58.147100 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W1009 01:44:58.147104 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W1009 01:44:58.147108 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W1009 01:44:58.147111 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W1009 01:44:58.147114 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W1009 01:44:58.147115 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W1009 01:44:58.147118 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I1009 01:44:58.151623 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I1009 01:44:58.151622 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I1009 01:44:58.151646 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I1009 01:44:58.151656 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I1009 01:44:58.151657 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I1009 01:44:58.151665 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I1009 01:44:58.151831 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2684208170/tls.crt::/tmp/serving-cert-2684208170/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1791510297\" (2026-10-09 01:44:56 +0000 UTC to 2026-10-09 01:44:57 +0000 UTC (now=2026-10-09 01:44:58.15181199 +0000 UTC))" I1009 01:44:58.151878 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2684208170/tls.crt::/tmp/serving-cert-2684208170/tls.key" I1009 01:44:58.151925 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791510298\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791510298\" (2026-10-09 00:44:57 +0000 UTC to 2027-10-09 00:44:57 +0000 UTC (now=2026-10-09 01:44:58.151908584 +0000 UTC))" I1009 01:44:58.151939 1 secure_serving.go:213] Serving securely on [::]:8443 I1009 01:44:58.151955 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I1009 01:44:58.151967 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I1009 01:44:58.153581 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I1009 01:44:58.155131 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I1009 01:44:58.155426 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I1009 01:44:58.155748 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I1009 01:44:58.164798 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I1009 01:44:58.164947 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"255e0399-402c-40bb-9dbb-3419309231ff", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9158", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5b4f5db6f9-dlwtl_90e95087-84d7-4e58-bd79-7b33f7b2a9c8 became leader I1009 01:44:58.165573 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I1009 01:44:58.165578 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I1009 01:44:58.165591 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I1009 01:44:58.165620 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I1009 01:44:58.165626 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I1009 01:44:58.165687 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I1009 01:44:58.165864 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I1009 01:44:58.166058 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I1009 01:44:58.166077 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I1009 01:44:58.169269 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I1009 01:44:58.174202 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I1009 01:44:58.174237 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I1009 01:44:58.174386 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I1009 01:44:58.214740 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I1009 01:44:58.251752 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I1009 01:44:58.251822 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I1009 01:44:58.251850 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I1009 01:44:58.251914 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-09 01:33:53 +0000 UTC to 2036-10-06 01:33:53 +0000 UTC (now=2026-10-09 01:44:58.251886407 +0000 UTC))" I1009 01:44:58.252040 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2684208170/tls.crt::/tmp/serving-cert-2684208170/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1791510297\" (2026-10-09 01:44:56 +0000 UTC to 2026-10-09 01:44:57 +0000 UTC (now=2026-10-09 01:44:58.252026595 +0000 UTC))" I1009 01:44:58.252179 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791510298\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791510298\" (2026-10-09 00:44:57 +0000 UTC to 2027-10-09 00:44:57 +0000 UTC (now=2026-10-09 01:44:58.252162513 +0000 UTC))" I1009 01:44:58.252284 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-10-09 01:33:54 +0000 UTC to 2036-10-06 01:33:54 +0000 UTC (now=2026-10-09 01:44:58.2522749 +0000 UTC))" I1009 01:44:58.252300 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-10-09 01:33:54 +0000 UTC to 2036-10-06 01:33:54 +0000 UTC (now=2026-10-09 01:44:58.252292248 +0000 UTC))" I1009 01:44:58.252310 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-10-09 01:33:54 +0000 UTC to 2036-10-06 01:33:54 +0000 UTC (now=2026-10-09 01:44:58.252303245 +0000 UTC))" I1009 01:44:58.252322 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-10-09 01:33:55 +0000 UTC to 2036-10-06 01:33:55 +0000 UTC (now=2026-10-09 01:44:58.25231629 +0000 UTC))" I1009 01:44:58.252332 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-10-09 01:33:56 +0000 UTC to 2036-10-06 01:33:56 +0000 UTC (now=2026-10-09 01:44:58.252325679 +0000 UTC))" I1009 01:44:58.252366 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2tav908eetiabnlala1ti4uumrqe6g6s-kx-1873e18f5f_customer-system-admin-signer@1791509644\" [] issuer=\"\" (2026-10-09 01:34:04 +0000 UTC to 2026-10-16 01:34:05 +0000 UTC (now=2026-10-09 01:44:58.252355126 +0000 UTC))" I1009 01:44:58.252381 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2tav908eetiabnlala1ti4uumrqe6g6s-kx-1873e18f5f_sre-system-admin-signer@1791509644\" [] issuer=\"\" (2026-10-09 01:34:04 +0000 UTC to 2026-10-16 01:34:05 +0000 UTC (now=2026-10-09 01:44:58.252373882 +0000 UTC))" I1009 01:44:58.252407 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-09 01:33:53 +0000 UTC to 2036-10-06 01:33:53 +0000 UTC (now=2026-10-09 01:44:58.252385221 +0000 UTC))" I1009 01:44:58.252496 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2684208170/tls.crt::/tmp/serving-cert-2684208170/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1791510297\" (2026-10-09 01:44:56 +0000 UTC to 2026-10-09 01:44:57 +0000 UTC (now=2026-10-09 01:44:58.252487968 +0000 UTC))" I1009 01:44:58.252582 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791510298\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791510298\" (2026-10-09 00:44:57 +0000 UTC to 2027-10-09 00:44:57 +0000 UTC (now=2026-10-09 01:44:58.252569691 +0000 UTC))" I1009 01:44:58.265522 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I1009 01:44:58.265671 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I1009 01:44:58.265684 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I1009 01:44:58.265690 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I1009 01:44:58.265695 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I1009 01:44:58.265699 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I1009 01:44:58.265702 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I1009 01:44:58.265726 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I1009 01:44:58.265740 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I1009 01:44:58.265733 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I1009 01:44:58.265773 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I1009 01:44:58.265788 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I1009 01:44:58.265794 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I1009 01:44:58.265800 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I1009 01:44:58.265808 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I1009 01:44:58.265812 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I1009 01:44:58.265746 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I1009 01:44:58.265881 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I1009 01:44:58.265887 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I1009 01:44:58.265890 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I1009 01:44:58.266080 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I1009 01:44:58.266087 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I1009 01:44:58.266092 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I1009 01:44:58.266095 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I1009 01:44:58.266097 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I1009 01:44:58.266099 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I1009 01:44:58.266098 1 base_controller.go:82] Caches are synced for ServiceServingCertController I1009 01:44:58.266115 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I1009 01:44:58.266118 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I1009 01:44:58.266120 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I1009 01:44:58.266123 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I1009 01:44:58.266124 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I1009 01:44:58.296037 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I1009 01:44:58.365662 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I1009 01:44:58.365675 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I1009 01:44:58.365681 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I1009 01:44:58.365685 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I1009 01:44:58.365688 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I1009 01:44:58.365690 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I1009 01:44:58.365714 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I1009 01:44:58.365712 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I1009 01:44:58.365721 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1009 01:44:58.365727 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1009 01:44:58.365731 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1009 01:44:58.365735 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1009 01:44:58.365739 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... W1009 01:44:58.365762 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I1009 01:44:58.365804 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I1009 01:44:58.365814 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I1009 01:44:58.365820 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I1009 01:44:58.365824 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I1009 01:44:58.365829 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I1009 01:44:58.365833 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I1009 01:44:58.365838 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.365851 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.365885 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.365883 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.365908 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.405487 1 configmap.go:109] updating configmap open-cluster-management-2tav908eetiabnlala1ti4uumrqe6g6s/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.405896 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.412111 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.412119 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.412202 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.420105 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I1009 01:44:58.422690 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.423343 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.423383 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.423634 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.578664 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.785911 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:58.995000 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:59.180047 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:59.381385 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:59.577759 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:59.776794 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I1009 01:44:59.979299 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:00.183838 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:00.379836 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:00.577468 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:00.787778 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:00.981958 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:01.179513 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:01.376963 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:01.579697 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:01.785782 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:01.980409 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:02.177932 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:02.378116 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:02.580210 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:02.779490 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:02.979381 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:03.177165 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:03.381326 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:03.577117 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I1009 01:45:03.778096 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:03.979066 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:04.176449 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:04.376669 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:04.580520 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:04.778440 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:04.981774 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:05.178069 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:05.376826 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I1009 01:45:05.576497 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:05.775564 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:05.977675 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:06.174914 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:06.375577 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I1009 01:45:06.577263 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:06.782679 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I1009 01:45:06.975936 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:07.176511 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:07.393693 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:07.577069 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:07.776859 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:07.977689 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:08.176283 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:08.375184 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:08.576202 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:08.776634 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:08.976671 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:09.178265 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:09.374273 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:09.574456 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:09.776868 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:09.975925 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:10.174844 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:10.376287 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:10.576674 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:10.776808 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:10.974991 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:11.176864 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:11.375794 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:11.576360 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:11.774336 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:11.978579 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:12.174543 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:12.375141 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:12.576376 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:12.774615 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I1009 01:45:28.349453 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I1009 01:46:09.851010 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I1009 01:46:09.862777 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I1009 01:46:15.036813 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I1009 01:46:15.040677 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I1009 01:46:53.009087 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I1009 01:47:23.172736 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I1009 01:58:08.791527 1 configmap.go:109] updating configmap minio-operator/openshift-service-ca.crt with the service signing CA bundle I1009 01:58:12.978919 1 configmap.go:109] updating configmap product-kubearchive/openshift-service-ca.crt with the service signing CA bundle I1009 01:58:14.064524 1 configmap.go:109] updating configmap tekton-logging/openshift-service-ca.crt with the service signing CA bundle I1009 01:58:15.077769 1 configmap.go:109] updating configmap tekton-results/openshift-service-ca.crt with the service signing CA bundle I1009 02:00:08.282792 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I1009 02:01:48.140067 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I1009 02:01:48.859637 1 configmap.go:109] updating configmap product-kubearchive-logging/openshift-service-ca.crt with the service signing CA bundle I1009 02:01:52.597665 1 configmap.go:109] updating configmap application-service/openshift-service-ca.crt with the service signing CA bundle I1009 02:01:53.778276 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:16.612517 1 configmap.go:109] updating configmap konflux-rbac/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:17.194226 1 configmap.go:109] updating configmap openshift-kueue-operator/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:21.836850 1 configmap.go:109] updating configmap build-templates-e2e/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:21.876767 1 configmap.go:109] updating configmap build-templates/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:22.467778 1 configmap.go:109] updating configmap perf-team-prometheus-reader/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:22.482364 1 configmap.go:109] updating configmap tempo-operator/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:22.611757 1 configmap.go:109] updating configmap openshift-adp/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:23.022929 1 configmap.go:109] updating configmap appstudio-monitoring/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:23.823979 1 configmap.go:109] updating configmap image-rbac-proxy/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:24.217885 1 configmap.go:109] updating configmap internal-services/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:24.760886 1 configmap.go:109] updating configmap mintmaker/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:26.406055 1 configmap.go:109] updating configmap konflux-otel/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:28.723487 1 configmap.go:109] updating configmap application-api/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:29.435641 1 configmap.go:109] updating configmap appstudio-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:30.203917 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:30.263673 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:35.025834 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:35.713276 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:35.749840 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:38.446811 1 configmap.go:109] updating configmap konflux-perfscale-1-tenant/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:38.481894 1 configmap.go:109] updating configmap konflux-perfscale-4-tenant/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:38.619433 1 configmap.go:109] updating configmap konflux-perfscale-3-tenant/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:38.707115 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration release-service-mutating-webhook-configuration with the service signing CA bundle I1009 02:02:38.723408 1 configmap.go:109] updating configmap konflux-perfscale-2-tenant/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:38.838819 1 configmap.go:109] updating configmap managed-konflux-perfscale-tenant/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:39.139633 1 admissionwebhook.go:116] updating validatingwebhookconfiguration release-service-validating-webhook-configuration with the service signing CA bundle I1009 02:02:40.459591 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration application-service-mutating-webhook-configuration with the service signing CA bundle I1009 02:02:40.511825 1 admissionwebhook.go:116] updating validatingwebhookconfiguration application-service-validating-webhook-configuration with the service signing CA bundle I1009 02:02:47.521047 1 configmap.go:109] updating configmap dummy-service/openshift-service-ca.crt with the service signing CA bundle I1009 02:02:51.257801 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/serving-certs-ca-bundle with the service signing CA bundle I1009 02:03:05.866520 1 configmap.go:109] updating configmap tekton-kueue/openshift-service-ca.crt with the service signing CA bundle I1009 02:03:08.624997 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I1009 02:03:09.260462 1 configmap.go:109] updating configmap konflux-kyverno/openshift-service-ca.crt with the service signing CA bundle I1009 02:03:09.538921 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E1009 02:03:09.646054 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I1009 02:03:09.647178 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I1009 02:03:09.833528 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E1009 02:03:09.895979 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I1009 02:03:20.436809 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration integration-service-mutating-webhook-configuration with the service signing CA bundle I1009 02:03:20.522581 1 admissionwebhook.go:116] updating validatingwebhookconfiguration integration-service-validating-webhook-configuration with the service signing CA bundle I1009 02:03:20.679346 1 configmap.go:109] updating configmap appstudio-registry-exporter/openshift-service-ca.crt with the service signing CA bundle I1009 02:03:24.681926 1 configmap.go:109] updating configmap tempo-operator/tempo-tempo-serving-cabundle with the service signing CA bundle I1009 02:03:58.678120 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I1009 02:04:18.605860 1 configmap.go:109] updating configmap caching/openshift-service-ca.crt with the service signing CA bundle I1009 02:04:19.374941 1 configmap.go:109] updating configmap konflux-kite/openshift-service-ca.crt with the service signing CA bundle I1009 02:04:20.630610 1 configmap.go:109] updating configmap konflux-policies/openshift-service-ca.crt with the service signing CA bundle I1009 02:04:43.668718 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W1009 02:04:58.297448 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" E1009 02:05:07.606837 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" I1009 02:05:35.179900 1 configmap.go:109] updating configmap konflux-disaster-recovery/openshift-service-ca.crt with the service signing CA bundle E1009 02:05:37.915720 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" E1009 02:06:56.151051 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" I1009 02:07:13.795455 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration kubearchive-mutating-webhook-configuration with the service signing CA bundle I1009 02:07:13.878118 1 admissionwebhook.go:116] updating validatingwebhookconfiguration kubearchive-validating-webhook-configuration with the service signing CA bundle E1009 02:08:25.640604 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" E1009 02:09:51.496418 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" E1009 02:11:40.500873 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" E1009 02:12:57.894502 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" E1009 02:14:02.844064 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" E1009 02:15:17.591236 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" I1009 02:15:32.302201 1 configmap.go:109] updating configmap e2e-secrets/openshift-service-ca.crt with the service signing CA bundle E1009 02:16:15.391063 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again" I1009 02:16:33.627496 1 configmap.go:109] updating configmap upgrade-namespace/openshift-service-ca.crt with the service signing CA bundle I1009 02:16:33.645315 1 configmap.go:109] updating configmap chains-e2e-dpqa/openshift-service-ca.crt with the service signing CA bundle E1009 02:21:21.093362 1 base_controller.go:277] "Unhandled Error" err="\"ServiceServingCertUpdateController\" controller failed to sync \"konflux-kite/konflux-kite-tls\", err: Operation cannot be fulfilled on secrets \"konflux-kite-tls\": the object has been modified; please apply your changes to the latest version and try again"