W1002 02:41:35.661980 1 cmd.go:257] Using insecure, self-signed certificates I1002 02:41:35.662200 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1790908895 cert, and key in /tmp/serving-cert-1857691405/serving-signer.crt, /tmp/serving-cert-1857691405/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1790908895" is unset, resetting to 157680000000000000 years! I1002 02:41:35.966872 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I1002 02:41:35.967136 1 observer_polling.go:159] Starting file observer I1002 02:41:35.967160 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1002 02:41:35.967170 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I1002 02:41:35.967174 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1002 02:41:35.967177 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1002 02:41:35.991387 1 builder.go:304] service-ca-controller version - I1002 02:41:35.991835 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1857691405/tls.crt::/tmp/serving-cert-1857691405/tls.key" I1002 02:41:36.366156 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I1002 02:41:36.370878 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I1002 02:41:36.370891 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I1002 02:41:36.370904 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I1002 02:41:36.370910 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I1002 02:41:36.373550 1 secure_serving.go:57] Forcing use of http/1.1 only W1002 02:41:36.373565 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. I1002 02:41:36.373565 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W1002 02:41:36.373568 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W1002 02:41:36.373580 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W1002 02:41:36.373584 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W1002 02:41:36.373586 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W1002 02:41:36.373588 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I1002 02:41:36.377822 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I1002 02:41:36.377848 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I1002 02:41:36.377891 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I1002 02:41:36.377905 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I1002 02:41:36.377912 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I1002 02:41:36.377931 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I1002 02:41:36.377966 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1857691405/tls.crt::/tmp/serving-cert-1857691405/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1790908895\" (2026-10-02 02:41:34 +0000 UTC to 2026-10-02 02:41:35 +0000 UTC (now=2026-10-02 02:41:36.377945599 +0000 UTC))" I1002 02:41:36.377988 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1857691405/tls.crt::/tmp/serving-cert-1857691405/tls.key" I1002 02:41:36.378078 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1790908896\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1790908896\" (2026-10-02 01:41:35 +0000 UTC to 2027-10-02 01:41:35 +0000 UTC (now=2026-10-02 02:41:36.378062411 +0000 UTC))" I1002 02:41:36.378091 1 secure_serving.go:213] Serving securely on [::]:8443 I1002 02:41:36.378101 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I1002 02:41:36.378110 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I1002 02:41:36.379310 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I1002 02:41:36.380836 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I1002 02:41:36.380837 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I1002 02:41:36.382165 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I1002 02:41:36.389918 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I1002 02:41:36.389967 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"031772c5-e3a4-4c55-9023-fbef83f4a337", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11820", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5b4f5db6f9-vp2ql_a4d34bfb-fb5b-4b09-9301-66923fefa8a7 became leader I1002 02:41:36.390690 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I1002 02:41:36.390688 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I1002 02:41:36.390690 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I1002 02:41:36.390716 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I1002 02:41:36.390738 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I1002 02:41:36.390767 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I1002 02:41:36.390964 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I1002 02:41:36.391124 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I1002 02:41:36.391193 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I1002 02:41:36.396639 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I1002 02:41:36.401480 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I1002 02:41:36.401546 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I1002 02:41:36.409915 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I1002 02:41:36.437484 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I1002 02:41:36.477931 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I1002 02:41:36.477952 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I1002 02:41:36.477935 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I1002 02:41:36.478166 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-02 02:25:08 +0000 UTC to 2036-09-29 02:25:08 +0000 UTC (now=2026-10-02 02:41:36.478139138 +0000 UTC))" I1002 02:41:36.478597 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1857691405/tls.crt::/tmp/serving-cert-1857691405/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1790908895\" (2026-10-02 02:41:34 +0000 UTC to 2026-10-02 02:41:35 +0000 UTC (now=2026-10-02 02:41:36.478574199 +0000 UTC))" I1002 02:41:36.478732 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1790908896\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1790908896\" (2026-10-02 01:41:35 +0000 UTC to 2027-10-02 01:41:35 +0000 UTC (now=2026-10-02 02:41:36.478712453 +0000 UTC))" I1002 02:41:36.478893 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-10-02 02:25:08 +0000 UTC to 2036-09-29 02:25:08 +0000 UTC (now=2026-10-02 02:41:36.478875471 +0000 UTC))" I1002 02:41:36.478918 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-10-02 02:25:09 +0000 UTC to 2036-09-29 02:25:09 +0000 UTC (now=2026-10-02 02:41:36.478904886 +0000 UTC))" I1002 02:41:36.478938 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-10-02 02:25:10 +0000 UTC to 2036-09-29 02:25:10 +0000 UTC (now=2026-10-02 02:41:36.478925834 +0000 UTC))" I1002 02:41:36.478958 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-10-02 02:25:10 +0000 UTC to 2036-09-29 02:25:10 +0000 UTC (now=2026-10-02 02:41:36.4789461 +0000 UTC))" I1002 02:41:36.478992 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-10-02 02:25:11 +0000 UTC to 2036-09-29 02:25:11 +0000 UTC (now=2026-10-02 02:41:36.478980843 +0000 UTC))" I1002 02:41:36.479027 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2t6cdgqk3js83u7ba6jeliv9o2kgm8c6-kx-50daefbb43_customer-system-admin-signer@1790907920\" [] issuer=\"\" (2026-10-02 02:25:19 +0000 UTC to 2026-10-09 02:25:20 +0000 UTC (now=2026-10-02 02:41:36.479011551 +0000 UTC))" I1002 02:41:36.479053 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2t6cdgqk3js83u7ba6jeliv9o2kgm8c6-kx-50daefbb43_sre-system-admin-signer@1790907920\" [] issuer=\"\" (2026-10-02 02:25:19 +0000 UTC to 2026-10-09 02:25:20 +0000 UTC (now=2026-10-02 02:41:36.479035745 +0000 UTC))" I1002 02:41:36.479072 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-02 02:25:08 +0000 UTC to 2036-09-29 02:25:08 +0000 UTC (now=2026-10-02 02:41:36.479061048 +0000 UTC))" I1002 02:41:36.479238 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1857691405/tls.crt::/tmp/serving-cert-1857691405/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1790908895\" (2026-10-02 02:41:34 +0000 UTC to 2026-10-02 02:41:35 +0000 UTC (now=2026-10-02 02:41:36.47921281 +0000 UTC))" I1002 02:41:36.479394 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1790908896\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1790908896\" (2026-10-02 01:41:35 +0000 UTC to 2027-10-02 01:41:35 +0000 UTC (now=2026-10-02 02:41:36.479379198 +0000 UTC))" I1002 02:41:36.490775 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I1002 02:41:36.490797 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I1002 02:41:36.490805 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I1002 02:41:36.490811 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I1002 02:41:36.490815 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I1002 02:41:36.490818 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I1002 02:41:36.490821 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I1002 02:41:36.490797 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I1002 02:41:36.490844 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I1002 02:41:36.490847 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I1002 02:41:36.490850 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I1002 02:41:36.490852 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I1002 02:41:36.490787 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I1002 02:41:36.490868 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I1002 02:41:36.490874 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I1002 02:41:36.490877 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I1002 02:41:36.490880 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I1002 02:41:36.490882 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I1002 02:41:36.490906 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I1002 02:41:36.491499 1 base_controller.go:82] Caches are synced for ServiceServingCertController I1002 02:41:36.491509 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I1002 02:41:36.491514 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I1002 02:41:36.491517 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I1002 02:41:36.491519 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I1002 02:41:36.491521 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I1002 02:41:36.491517 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I1002 02:41:36.491534 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I1002 02:41:36.491543 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I1002 02:41:36.491547 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I1002 02:41:36.491553 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I1002 02:41:36.491555 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I1002 02:41:36.493320 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I1002 02:41:36.524944 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I1002 02:41:36.591400 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I1002 02:41:36.591428 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I1002 02:41:36.591437 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I1002 02:41:36.591424 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I1002 02:41:36.591451 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I1002 02:41:36.591461 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I1002 02:41:36.591465 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I1002 02:41:36.591469 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I1002 02:41:36.591473 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I1002 02:41:36.591477 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.591406 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I1002 02:41:36.591523 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle W1002 02:41:36.591506 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I1002 02:41:36.591440 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I1002 02:41:36.591606 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I1002 02:41:36.591612 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I1002 02:41:36.591522 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1002 02:41:36.591624 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1002 02:41:36.591632 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1002 02:41:36.591636 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1002 02:41:36.591637 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.591640 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1002 02:41:36.591503 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I1002 02:41:36.591659 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.591672 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.602580 1 configmap.go:109] updating configmap open-cluster-management-2t6cdgqk3js83u7ba6jeliv9o2kgm8c6/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.607625 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.608937 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.608974 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.609953 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.623390 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I1002 02:41:36.623657 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.629612 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.629841 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.629616 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:36.803677 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:37.005566 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:37.215701 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:37.405659 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:37.602621 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:37.802347 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:38.001090 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:38.204273 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:38.403790 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:38.602014 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:38.803594 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:39.001306 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:39.203417 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:39.403304 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:39.601136 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:39.802799 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:40.003040 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:40.202798 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:40.401961 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:40.603870 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W1002 02:41:40.603933 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I1002 02:41:40.802530 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:41.009587 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:41.202867 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:41.402881 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:41.603983 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:41.802668 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I1002 02:41:42.003518 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:42.202083 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:42.404221 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:42.600874 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:42.803753 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:43.004062 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:43.201712 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:43.402243 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:43.602896 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I1002 02:41:43.803601 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:44.002984 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:44.201126 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:44.402848 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:44.600933 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I1002 02:41:44.801657 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:45.006472 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I1002 02:41:45.201777 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:45.401448 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:45.603023 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:45.801823 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:46.003709 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:46.204659 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:46.402499 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:46.602210 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:46.802582 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:47.002291 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:47.201117 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:47.399722 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:47.599881 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:47.801360 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:48.001659 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:48.200685 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:48.402181 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:48.603256 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:48.800357 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:49.001357 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:49.204115 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:49.399774 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:49.601014 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:49.801233 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:50.000020 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:50.200965 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:50.400119 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:50.600520 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:50.799693 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I1002 02:41:51.002915 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I1002 02:42:04.752551 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I1002 02:42:04.768208 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I1002 02:42:08.930170 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I1002 02:42:08.930185 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I1002 02:42:32.991573 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I1002 02:42:40.890900 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I1002 02:43:37.028987 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I1002 02:49:27.258862 1 configmap.go:109] updating configmap minio-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:49:31.439558 1 configmap.go:109] updating configmap product-kubearchive/openshift-service-ca.crt with the service signing CA bundle I1002 02:49:32.552262 1 configmap.go:109] updating configmap tekton-logging/openshift-service-ca.crt with the service signing CA bundle I1002 02:49:33.720217 1 configmap.go:109] updating configmap tekton-results/openshift-service-ca.crt with the service signing CA bundle I1002 02:51:24.238446 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:03.652391 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:07.380781 1 configmap.go:109] updating configmap product-kubearchive-logging/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:09.716372 1 configmap.go:109] updating configmap application-service/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:10.702673 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:35.236132 1 configmap.go:109] updating configmap openshift-kueue-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:35.515438 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:36.063671 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:37.655253 1 configmap.go:109] updating configmap appstudio-monitoring/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:39.424953 1 configmap.go:109] updating configmap konflux-otel/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:39.506438 1 configmap.go:109] updating configmap perf-team-prometheus-reader/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:40.254616 1 configmap.go:109] updating configmap tempo-operator/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:40.917883 1 configmap.go:109] updating configmap image-rbac-proxy/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:40.957128 1 configmap.go:109] updating configmap appstudio-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:41.339265 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration application-service-mutating-webhook-configuration with the service signing CA bundle I1002 02:53:41.437447 1 admissionwebhook.go:116] updating validatingwebhookconfiguration application-service-validating-webhook-configuration with the service signing CA bundle I1002 02:53:43.706749 1 configmap.go:109] updating configmap application-api/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:44.182738 1 configmap.go:109] updating configmap konflux-rbac/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:44.941697 1 configmap.go:109] updating configmap build-templates/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:45.244414 1 configmap.go:109] updating configmap build-templates-e2e/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:45.456298 1 configmap.go:109] updating configmap project-controller/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:46.007418 1 configmap.go:109] updating configmap internal-services/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:47.802284 1 configmap.go:109] updating configmap openshift-adp/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:51.372961 1 configmap.go:109] updating configmap konflux-perfscale-4-tenant/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:51.415404 1 configmap.go:109] updating configmap konflux-perfscale-1-tenant/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:51.452682 1 configmap.go:109] updating configmap konflux-perfscale-2-tenant/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:51.464147 1 configmap.go:109] updating configmap konflux-perfscale-3-tenant/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:51.475382 1 configmap.go:109] updating configmap managed-konflux-perfscale-tenant/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:52.321378 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:53.187057 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:55.604883 1 configmap.go:109] updating configmap dummy-service/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:57.607038 1 configmap.go:109] updating configmap mintmaker/openshift-service-ca.crt with the service signing CA bundle I1002 02:53:59.118493 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/serving-certs-ca-bundle with the service signing CA bundle I1002 02:53:59.445581 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:01.875726 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration release-service-mutating-webhook-configuration with the service signing CA bundle I1002 02:54:01.935175 1 admissionwebhook.go:116] updating validatingwebhookconfiguration release-service-validating-webhook-configuration with the service signing CA bundle I1002 02:54:13.342095 1 configmap.go:109] updating configmap tekton-kueue/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:15.525950 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:16.324798 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E1002 02:54:16.360908 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:54:16.362036 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E1002 02:54:16.382209 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I1002 02:54:16.383321 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I1002 02:54:17.992341 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:28.322245 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration integration-service-mutating-webhook-configuration with the service signing CA bundle I1002 02:54:28.574221 1 configmap.go:109] updating configmap appstudio-registry-exporter/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:28.608674 1 admissionwebhook.go:116] updating validatingwebhookconfiguration integration-service-validating-webhook-configuration with the service signing CA bundle I1002 02:54:32.962290 1 configmap.go:109] updating configmap konflux-kyverno/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:40.332160 1 configmap.go:109] updating configmap konflux-kite/openshift-service-ca.crt with the service signing CA bundle I1002 02:54:46.519208 1 configmap.go:109] updating configmap tempo-operator/tempo-tempo-serving-cabundle with the service signing CA bundle I1002 02:55:15.120142 1 configmap.go:109] updating configmap caching/openshift-service-ca.crt with the service signing CA bundle I1002 02:55:15.849353 1 configmap.go:109] updating configmap konflux-policies/openshift-service-ca.crt with the service signing CA bundle I1002 02:55:33.726186 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I1002 02:55:42.567468 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration kubearchive-mutating-webhook-configuration with the service signing CA bundle I1002 02:55:42.809601 1 admissionwebhook.go:116] updating validatingwebhookconfiguration kubearchive-validating-webhook-configuration with the service signing CA bundle I1002 02:56:47.111651 1 configmap.go:109] updating configmap konflux-disaster-recovery/openshift-service-ca.crt with the service signing CA bundle W1002 03:01:36.526165 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I1002 03:04:31.314472 1 configmap.go:109] updating configmap e2e-secrets/openshift-service-ca.crt with the service signing CA bundle I1002 03:05:06.480446 1 configmap.go:109] updating configmap chains-e2e-gmhp/openshift-service-ca.crt with the service signing CA bundle I1002 03:05:06.591915 1 configmap.go:109] updating configmap upgrade-namespace/openshift-service-ca.crt with the service signing CA bundle