W1005 06:31:41.534172 1 cmd.go:257] Using insecure, self-signed certificates I1005 06:31:41.534360 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1791181901 cert, and key in /tmp/serving-cert-2273134308/serving-signer.crt, /tmp/serving-cert-2273134308/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1791181901" is unset, resetting to 157680000000000000 years! I1005 06:31:41.774012 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I1005 06:31:41.774228 1 observer_polling.go:159] Starting file observer I1005 06:31:41.774325 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I1005 06:31:41.774342 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I1005 06:31:41.774346 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I1005 06:31:41.774349 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I1005 06:31:41.798517 1 builder.go:304] service-ca-controller version - I1005 06:31:41.799081 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2273134308/tls.crt::/tmp/serving-cert-2273134308/tls.key" I1005 06:31:42.239757 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I1005 06:31:42.245283 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I1005 06:31:42.245297 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I1005 06:31:42.245310 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I1005 06:31:42.245315 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I1005 06:31:42.248587 1 secure_serving.go:57] Forcing use of http/1.1 only I1005 06:31:42.248597 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W1005 06:31:42.248603 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W1005 06:31:42.248608 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W1005 06:31:42.248612 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W1005 06:31:42.248615 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W1005 06:31:42.248617 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W1005 06:31:42.248620 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I1005 06:31:42.252370 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I1005 06:31:42.252397 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I1005 06:31:42.252444 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I1005 06:31:42.252460 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I1005 06:31:42.252444 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I1005 06:31:42.252471 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I1005 06:31:42.252604 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2273134308/tls.crt::/tmp/serving-cert-2273134308/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1791181901\" (2026-10-05 06:31:40 +0000 UTC to 2026-10-05 06:31:41 +0000 UTC (now=2026-10-05 06:31:42.252569122 +0000 UTC))" I1005 06:31:42.252629 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2273134308/tls.crt::/tmp/serving-cert-2273134308/tls.key" I1005 06:31:42.252749 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791181902\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791181902\" (2026-10-05 05:31:41 +0000 UTC to 2027-10-05 05:31:41 +0000 UTC (now=2026-10-05 06:31:42.25272861 +0000 UTC))" I1005 06:31:42.252766 1 secure_serving.go:213] Serving securely on [::]:8443 I1005 06:31:42.252781 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I1005 06:31:42.252799 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I1005 06:31:42.253484 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I1005 06:31:42.255481 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I1005 06:31:42.255510 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I1005 06:31:42.255535 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I1005 06:31:42.266070 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I1005 06:31:42.266118 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"67d0ba35-707b-4603-b0c6-8796a9fbb9b2", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11172", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5b4f5db6f9-gdwrd_878ab15c-032b-4cbf-a560-086dc2609f88 became leader I1005 06:31:42.266855 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I1005 06:31:42.266866 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I1005 06:31:42.266871 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I1005 06:31:42.266857 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I1005 06:31:42.266892 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I1005 06:31:42.267020 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I1005 06:31:42.267205 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I1005 06:31:42.267429 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I1005 06:31:42.267448 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I1005 06:31:42.270819 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I1005 06:31:42.281653 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I1005 06:31:42.281934 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I1005 06:31:42.283193 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I1005 06:31:42.314306 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I1005 06:31:42.352478 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I1005 06:31:42.352496 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I1005 06:31:42.352570 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I1005 06:31:42.352664 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-05 06:15:27 +0000 UTC to 2036-10-02 06:15:27 +0000 UTC (now=2026-10-05 06:31:42.352635138 +0000 UTC))" I1005 06:31:42.352801 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2273134308/tls.crt::/tmp/serving-cert-2273134308/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1791181901\" (2026-10-05 06:31:40 +0000 UTC to 2026-10-05 06:31:41 +0000 UTC (now=2026-10-05 06:31:42.35279019 +0000 UTC))" I1005 06:31:42.352911 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791181902\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791181902\" (2026-10-05 05:31:41 +0000 UTC to 2027-10-05 05:31:41 +0000 UTC (now=2026-10-05 06:31:42.352899329 +0000 UTC))" I1005 06:31:42.353004 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-10-05 06:15:27 +0000 UTC to 2036-10-02 06:15:27 +0000 UTC (now=2026-10-05 06:31:42.352993336 +0000 UTC))" I1005 06:31:42.353018 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-10-05 06:15:28 +0000 UTC to 2036-10-02 06:15:28 +0000 UTC (now=2026-10-05 06:31:42.353011832 +0000 UTC))" I1005 06:31:42.353030 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-10-05 06:15:28 +0000 UTC to 2036-10-02 06:15:28 +0000 UTC (now=2026-10-05 06:31:42.353024211 +0000 UTC))" I1005 06:31:42.353039 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-10-05 06:15:29 +0000 UTC to 2036-10-02 06:15:29 +0000 UTC (now=2026-10-05 06:31:42.353033958 +0000 UTC))" I1005 06:31:42.353056 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-10-05 06:15:29 +0000 UTC to 2036-10-02 06:15:29 +0000 UTC (now=2026-10-05 06:31:42.353044948 +0000 UTC))" I1005 06:31:42.353069 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2t8f2ge0d61dau0m8ht7ivrjqi6fl8k4-kx-f63e9cc225_customer-system-admin-signer@1791180939\" [] issuer=\"\" (2026-10-05 06:15:38 +0000 UTC to 2026-10-12 06:15:39 +0000 UTC (now=2026-10-05 06:31:42.35306242 +0000 UTC))" I1005 06:31:42.353085 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2t8f2ge0d61dau0m8ht7ivrjqi6fl8k4-kx-f63e9cc225_sre-system-admin-signer@1791180939\" [] issuer=\"\" (2026-10-05 06:15:38 +0000 UTC to 2026-10-12 06:15:39 +0000 UTC (now=2026-10-05 06:31:42.353076168 +0000 UTC))" I1005 06:31:42.353097 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-05 06:15:27 +0000 UTC to 2036-10-02 06:15:27 +0000 UTC (now=2026-10-05 06:31:42.353091372 +0000 UTC))" I1005 06:31:42.353175 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2273134308/tls.crt::/tmp/serving-cert-2273134308/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1791181901\" (2026-10-05 06:31:40 +0000 UTC to 2026-10-05 06:31:41 +0000 UTC (now=2026-10-05 06:31:42.353167872 +0000 UTC))" I1005 06:31:42.353256 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791181902\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791181902\" (2026-10-05 05:31:41 +0000 UTC to 2027-10-05 05:31:41 +0000 UTC (now=2026-10-05 06:31:42.353248538 +0000 UTC))" I1005 06:31:42.366982 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I1005 06:31:42.366999 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I1005 06:31:42.367005 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I1005 06:31:42.367009 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I1005 06:31:42.367011 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I1005 06:31:42.367001 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I1005 06:31:42.367021 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I1005 06:31:42.367025 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I1005 06:31:42.367027 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I1005 06:31:42.367031 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I1005 06:31:42.367033 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I1005 06:31:42.367015 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I1005 06:31:42.367057 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I1005 06:31:42.367063 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I1005 06:31:42.367066 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I1005 06:31:42.367069 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I1005 06:31:42.367071 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I1005 06:31:42.367073 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I1005 06:31:42.367099 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I1005 06:31:42.367485 1 base_controller.go:82] Caches are synced for ServiceServingCertController I1005 06:31:42.367493 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I1005 06:31:42.367498 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I1005 06:31:42.367501 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I1005 06:31:42.367508 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I1005 06:31:42.367513 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I1005 06:31:42.367505 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I1005 06:31:42.367516 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I1005 06:31:42.367526 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I1005 06:31:42.367524 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I1005 06:31:42.367529 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I1005 06:31:42.367532 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I1005 06:31:42.375201 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I1005 06:31:42.396712 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I1005 06:31:42.467745 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I1005 06:31:42.467761 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I1005 06:31:42.467779 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I1005 06:31:42.467782 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I1005 06:31:42.467785 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I1005 06:31:42.467787 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I1005 06:31:42.467789 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I1005 06:31:42.467790 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I1005 06:31:42.467792 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I1005 06:31:42.467793 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I1005 06:31:42.467794 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I1005 06:31:42.467795 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I1005 06:31:42.467796 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I1005 06:31:42.467830 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.467830 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I1005 06:31:42.467836 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.467767 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1005 06:31:42.467890 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1005 06:31:42.467901 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1005 06:31:42.467906 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1005 06:31:42.467909 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I1005 06:31:42.467910 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.467922 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.467946 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle W1005 06:31:42.467867 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I1005 06:31:42.478145 1 configmap.go:109] updating configmap open-cluster-management-2t8f2ge0d61dau0m8ht7ivrjqi6fl8k4/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.482431 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.482877 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.484120 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.489748 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.490484 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I1005 06:31:42.496370 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.498952 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.502773 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.506027 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.679237 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:42.880849 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:43.080019 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:43.278314 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:43.478947 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:43.676829 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:43.878363 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:44.077543 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:44.280072 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:44.477662 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:44.680102 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:44.879658 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:45.077315 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:45.279169 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:45.479842 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:45.680989 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:45.878333 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:46.077201 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:46.278173 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:46.481301 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:46.680499 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W1005 06:31:46.680949 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I1005 06:31:46.902055 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:47.100610 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:47.282912 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:47.479527 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:47.678595 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I1005 06:31:47.877347 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:48.080216 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:48.277856 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:48.478266 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:48.676750 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:48.878076 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:49.078517 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:49.280642 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:49.478957 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I1005 06:31:49.680060 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:49.878022 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:50.078554 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:50.281063 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:50.478807 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I1005 06:31:50.680167 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:50.878569 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I1005 06:31:51.080556 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:51.278540 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:51.478954 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:51.681070 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:51.879195 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:52.077731 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:52.279841 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:52.482355 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:52.680828 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:52.878187 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:53.080015 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:53.279291 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:53.477781 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:53.678691 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:53.878030 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:54.078145 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:54.278625 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:54.476646 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:54.678523 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:54.876100 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:55.077888 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:55.277985 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:55.477573 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:55.681997 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:55.876789 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:56.078744 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:56.277564 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:56.478497 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:56.677793 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I1005 06:31:56.878107 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I1005 06:32:06.401957 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I1005 06:32:11.477067 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I1005 06:32:11.491844 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I1005 06:32:15.671276 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I1005 06:32:15.671278 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I1005 06:32:45.662667 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I1005 06:34:02.607280 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I1005 06:39:35.571636 1 configmap.go:109] updating configmap minio-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:39:39.745102 1 configmap.go:109] updating configmap product-kubearchive/openshift-service-ca.crt with the service signing CA bundle I1005 06:39:40.835878 1 configmap.go:109] updating configmap tekton-logging/openshift-service-ca.crt with the service signing CA bundle I1005 06:39:41.938580 1 configmap.go:109] updating configmap tekton-results/openshift-service-ca.crt with the service signing CA bundle I1005 06:40:30.060196 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:05.304870 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:08.521972 1 configmap.go:109] updating configmap product-kubearchive-logging/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:10.162924 1 configmap.go:109] updating configmap application-service/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:11.011874 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:34.172651 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:36.210283 1 configmap.go:109] updating configmap openshift-adp/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:36.376466 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:36.521930 1 configmap.go:109] updating configmap openshift-kueue-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:37.619005 1 configmap.go:109] updating configmap konflux-rbac/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:38.064974 1 configmap.go:109] updating configmap appstudio-monitoring/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:38.470343 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:39.916771 1 configmap.go:109] updating configmap application-api/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:42.402047 1 configmap.go:109] updating configmap tempo-operator/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:43.675059 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration application-service-mutating-webhook-configuration with the service signing CA bundle I1005 06:42:43.717025 1 configmap.go:109] updating configmap perf-team-prometheus-reader/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:43.879651 1 admissionwebhook.go:116] updating validatingwebhookconfiguration application-service-validating-webhook-configuration with the service signing CA bundle I1005 06:42:44.024897 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:44.091658 1 configmap.go:109] updating configmap internal-services/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:44.814827 1 configmap.go:109] updating configmap image-rbac-proxy/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:47.134998 1 configmap.go:109] updating configmap appstudio-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:47.293869 1 configmap.go:109] updating configmap konflux-otel/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:47.909832 1 configmap.go:109] updating configmap build-templates-e2e/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:47.949874 1 configmap.go:109] updating configmap build-templates/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:54.439891 1 configmap.go:109] updating configmap appstudio-registry-exporter/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:55.438156 1 configmap.go:109] updating configmap mintmaker/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:59.959693 1 configmap.go:109] updating configmap managed-konflux-perfscale-tenant/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:59.962954 1 configmap.go:109] updating configmap konflux-perfscale-3-tenant/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:59.991142 1 configmap.go:109] updating configmap konflux-perfscale-4-tenant/openshift-service-ca.crt with the service signing CA bundle I1005 06:42:59.999792 1 configmap.go:109] updating configmap konflux-perfscale-2-tenant/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:00.032928 1 configmap.go:109] updating configmap konflux-perfscale-1-tenant/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:03.135768 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:05.296937 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:09.735705 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration release-service-mutating-webhook-configuration with the service signing CA bundle I1005 06:43:09.788486 1 admissionwebhook.go:116] updating validatingwebhookconfiguration release-service-validating-webhook-configuration with the service signing CA bundle I1005 06:43:13.342974 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:14.519790 1 configmap.go:109] updating configmap konflux-kyverno/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:14.949117 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I1005 06:43:14.994734 1 configmap.go:109] updating configmap dummy-service/openshift-service-ca.crt with the service signing CA bundle E1005 06:43:15.045170 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I1005 06:43:15.046300 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I1005 06:43:15.116786 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E1005 06:43:15.169981 1 base_controller.go:277] "Unhandled Error" err="\"CRDCABundleInjector\" controller failed to sync \"integrationtestscenarios.appstudio.redhat.com\", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io \"integrationtestscenarios.appstudio.redhat.com\": the object has been modified; please apply your changes to the latest version and try again" I1005 06:43:29.197903 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration integration-service-mutating-webhook-configuration with the service signing CA bundle I1005 06:43:29.282652 1 admissionwebhook.go:116] updating validatingwebhookconfiguration integration-service-validating-webhook-configuration with the service signing CA bundle I1005 06:43:29.632183 1 configmap.go:109] updating configmap caching/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:29.783736 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/serving-certs-ca-bundle with the service signing CA bundle I1005 06:43:30.494356 1 configmap.go:109] updating configmap tekton-kueue/openshift-service-ca.crt with the service signing CA bundle I1005 06:43:33.094560 1 configmap.go:109] updating configmap konflux-kite/openshift-service-ca.crt with the service signing CA bundle I1005 06:44:13.839890 1 configmap.go:109] updating configmap tempo-operator/tempo-tempo-serving-cabundle with the service signing CA bundle I1005 06:44:16.792285 1 configmap.go:109] updating configmap konflux-policies/openshift-service-ca.crt with the service signing CA bundle I1005 06:44:36.945018 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration kubearchive-mutating-webhook-configuration with the service signing CA bundle I1005 06:44:36.984906 1 admissionwebhook.go:116] updating validatingwebhookconfiguration kubearchive-validating-webhook-configuration with the service signing CA bundle I1005 06:45:03.437815 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I1005 06:45:26.980030 1 configmap.go:109] updating configmap konflux-disaster-recovery/openshift-service-ca.crt with the service signing CA bundle I1005 06:48:17.919648 1 configmap.go:109] updating configmap e2e-secrets/openshift-service-ca.crt with the service signing CA bundle I1005 06:49:16.490835 1 configmap.go:109] updating configmap chains-e2e-lgwn/openshift-service-ca.crt with the service signing CA bundle W1005 06:51:42.397769 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"