W0629 11:14:54.546221 1 cmd.go:257] Using insecure, self-signed certificates I0629 11:14:54.546491 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782731694 cert, and key in /tmp/serving-cert-3885515932/serving-signer.crt, /tmp/serving-cert-3885515932/serving-signer.key I0629 11:14:54.803264 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0629 11:14:54.803552 1 observer_polling.go:159] Starting file observer I0629 11:14:54.803786 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0629 11:14:54.803798 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0629 11:14:54.836322 1 builder.go:304] service-ca-controller version v4.18.0-202504090803.p0.g30efb52.assembly.stream.el9-0-gf72aef6- I0629 11:14:54.836842 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3885515932/tls.crt::/tmp/serving-cert-3885515932/tls.key" I0629 11:14:55.213375 1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController I0629 11:14:55.218636 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0629 11:14:55.218650 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0629 11:14:55.218665 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0629 11:14:55.218671 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0629 11:14:55.221912 1 secure_serving.go:57] Forcing use of http/1.1 only I0629 11:14:55.221923 1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0629 11:14:55.221927 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0629 11:14:55.221940 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0629 11:14:55.221943 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0629 11:14:55.221945 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0629 11:14:55.221947 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0629 11:14:55.221948 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0629 11:14:55.226408 1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController I0629 11:14:55.226424 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0629 11:14:55.226435 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0629 11:14:55.226468 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0629 11:14:55.226442 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0629 11:14:55.226428 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0629 11:14:55.226577 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3885515932/tls.crt::/tmp/serving-cert-3885515932/tls.key" I0629 11:14:55.226606 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3885515932/tls.crt::/tmp/serving-cert-3885515932/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782731694\" (2026-06-29 11:14:53 +0000 UTC to 2026-07-29 11:14:54 +0000 UTC (now=2026-06-29 11:14:55.226577729 +0000 UTC))" I0629 11:14:55.226697 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782731695\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782731695\" (2026-06-29 10:14:54 +0000 UTC to 2027-06-29 10:14:54 +0000 UTC (now=2026-06-29 11:14:55.226685565 +0000 UTC))" I0629 11:14:55.226711 1 secure_serving.go:213] Serving securely on [::]:8443 I0629 11:14:55.226723 1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated I0629 11:14:55.226735 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0629 11:14:55.227152 1 leaderelection.go:254] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0629 11:14:55.229781 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0629 11:14:55.229781 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175 I0629 11:14:55.229852 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0629 11:14:55.240216 1 leaderelection.go:268] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0629 11:14:55.240272 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"130e717c-f2f2-4790-ace3-f7e74a001eca", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11580", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-6549cb95df-5pxtt_39af13e8-2dd2-4f29-8a6b-c650982f24e7 became leader I0629 11:14:55.240820 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0629 11:14:55.240835 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0629 11:14:55.240821 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0629 11:14:55.240864 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0629 11:14:55.240878 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0629 11:14:55.240909 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0629 11:14:55.241136 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0629 11:14:55.241172 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0629 11:14:55.244019 1 reflector.go:368] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0629 11:14:55.251920 1 reflector.go:368] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0629 11:14:55.251947 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0629 11:14:55.252735 1 reflector.go:368] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0629 11:14:55.310218 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0629 11:14:55.326516 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0629 11:14:55.326516 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0629 11:14:55.326536 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0629 11:14:55.326731 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-06-29 10:58:54 +0000 UTC to 2036-06-26 10:58:54 +0000 UTC (now=2026-06-29 11:14:55.32667966 +0000 UTC))" I0629 11:14:55.327082 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3885515932/tls.crt::/tmp/serving-cert-3885515932/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782731694\" (2026-06-29 11:14:53 +0000 UTC to 2026-07-29 11:14:54 +0000 UTC (now=2026-06-29 11:14:55.327066002 +0000 UTC))" I0629 11:14:55.327176 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782731695\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782731695\" (2026-06-29 10:14:54 +0000 UTC to 2027-06-29 10:14:54 +0000 UTC (now=2026-06-29 11:14:55.327165388 +0000 UTC))" I0629 11:14:55.327275 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-06-29 10:58:55 +0000 UTC to 2036-06-26 10:58:55 +0000 UTC (now=2026-06-29 11:14:55.327262768 +0000 UTC))" I0629 11:14:55.327289 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-06-29 10:58:55 +0000 UTC to 2036-06-26 10:58:55 +0000 UTC (now=2026-06-29 11:14:55.327282658 +0000 UTC))" I0629 11:14:55.327298 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-06-29 10:58:56 +0000 UTC to 2036-06-26 10:58:56 +0000 UTC (now=2026-06-29 11:14:55.327292659 +0000 UTC))" I0629 11:14:55.327308 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-06-29 10:58:56 +0000 UTC to 2036-06-26 10:58:56 +0000 UTC (now=2026-06-29 11:14:55.327301918 +0000 UTC))" I0629 11:14:55.327329 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-06-29 10:58:57 +0000 UTC to 2036-06-26 10:58:57 +0000 UTC (now=2026-06-29 11:14:55.327313598 +0000 UTC))" I0629 11:14:55.327343 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r80198b21vepbs0nis99otm7esc5rne-kx-7f8457c5e9_customer-system-admin-signer@1782730747\" [] issuer=\"\" (2026-06-29 10:59:06 +0000 UTC to 2026-07-06 10:59:07 +0000 UTC (now=2026-06-29 11:14:55.327335587 +0000 UTC))" I0629 11:14:55.327368 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r80198b21vepbs0nis99otm7esc5rne-kx-7f8457c5e9_sre-system-admin-signer@1782730747\" [] issuer=\"\" (2026-06-29 10:59:06 +0000 UTC to 2026-07-06 10:59:07 +0000 UTC (now=2026-06-29 11:14:55.327349676 +0000 UTC))" I0629 11:14:55.327380 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-06-29 10:58:54 +0000 UTC to 2036-06-26 10:58:54 +0000 UTC (now=2026-06-29 11:14:55.327374349 +0000 UTC))" I0629 11:14:55.327490 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3885515932/tls.crt::/tmp/serving-cert-3885515932/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782731694\" (2026-06-29 11:14:53 +0000 UTC to 2026-07-29 11:14:54 +0000 UTC (now=2026-06-29 11:14:55.327481787 +0000 UTC))" I0629 11:14:55.327577 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782731695\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782731695\" (2026-06-29 10:14:54 +0000 UTC to 2027-06-29 10:14:54 +0000 UTC (now=2026-06-29 11:14:55.327569516 +0000 UTC))" I0629 11:14:55.340875 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0629 11:14:55.340887 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0629 11:14:55.340892 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0629 11:14:55.340897 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0629 11:14:55.340899 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0629 11:14:55.340902 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0629 11:14:55.340930 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0629 11:14:55.340953 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0629 11:14:55.340958 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0629 11:14:55.340962 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0629 11:14:55.340965 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0629 11:14:55.340967 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0629 11:14:55.340934 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0629 11:14:55.340978 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0629 11:14:55.340983 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0629 11:14:55.340986 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0629 11:14:55.340990 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0629 11:14:55.340994 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0629 11:14:55.341011 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0629 11:14:55.341151 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0629 11:14:55.341158 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0629 11:14:55.341161 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0629 11:14:55.341163 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0629 11:14:55.341165 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0629 11:14:55.341167 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0629 11:14:55.341227 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0629 11:14:55.341238 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0629 11:14:55.341243 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0629 11:14:55.341246 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0629 11:14:55.341249 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0629 11:14:55.341252 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0629 11:14:55.352218 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0629 11:14:55.387204 1 reflector.go:368] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0629 11:14:55.441594 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0629 11:14:55.441615 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 11:14:55.441602 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0629 11:14:55.441637 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0629 11:14:55.441645 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0629 11:14:55.441648 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0629 11:14:55.441652 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0629 11:14:55.441654 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0629 11:14:55.441675 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0629 11:14:55.441679 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0629 11:14:55.441625 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 11:14:55.441624 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0629 11:14:55.441715 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 11:14:55.441718 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0629 11:14:55.441722 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0629 11:14:55.441722 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 11:14:55.441724 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0629 11:14:55.441726 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0629 11:14:55.441744 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.441728 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0629 11:14:55.441755 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0629 11:14:55.441773 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.441798 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.441813 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.441832 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.453918 1 configmap.go:109] updating configmap open-cluster-management-2r80198b21vepbs0nis99otm7esc5rne/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.456662 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.459631 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.459669 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.459953 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.467880 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0629 11:14:55.467929 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.472523 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.472607 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.474547 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.652747 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:55.856522 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:56.055589 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:56.253708 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:56.452120 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:56.653239 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:56.852033 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:57.052515 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:57.255160 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:57.453329 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:57.652810 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:57.853685 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:58.066667 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:58.255706 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:58.454323 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:58.653883 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:58.853536 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:59.052232 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:59.252424 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:59.451508 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0629 11:14:59.453182 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0629 11:14:59.655112 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0629 11:14:59.853710 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:00.054220 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:00.254582 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:00.454047 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:00.655611 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0629 11:15:00.853619 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:01.051832 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:01.253524 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:01.452761 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:01.654212 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:01.853266 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:02.053284 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:02.251879 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:02.455625 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0629 11:15:02.653078 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:02.853796 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:03.052021 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:03.251757 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:03.453502 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0629 11:15:03.652983 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:03.852818 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0629 11:15:04.051555 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:04.253179 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:04.452805 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:04.651863 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:04.855986 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:05.053828 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:05.254426 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:05.452090 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:05.652405 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:05.852269 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:06.052805 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:06.252477 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:06.452258 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:06.650406 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:06.851606 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:07.053031 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:07.251628 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:07.451780 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:07.652228 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:07.851373 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:08.052002 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:08.251109 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:08.451990 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:08.650360 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:08.851221 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:09.052977 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:09.252104 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:09.450522 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:09.652083 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:09.852130 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0629 11:15:23.998982 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0629 11:15:24.017924 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0629 11:15:28.194079 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0629 11:15:28.203630 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0629 11:15:44.905544 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0629 11:16:18.657789 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0629 11:16:59.803985 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0629 11:24:52.891197 1 configmap.go:109] updating configmap minio-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:24:56.842627 1 configmap.go:109] updating configmap product-kubearchive/openshift-service-ca.crt with the service signing CA bundle I0629 11:24:58.031289 1 configmap.go:109] updating configmap tekton-logging/openshift-service-ca.crt with the service signing CA bundle I0629 11:24:59.162006 1 configmap.go:109] updating configmap tekton-results/openshift-service-ca.crt with the service signing CA bundle I0629 11:25:52.834641 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:11.652035 1 configmap.go:109] updating configmap quality-dashboard/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:15.052392 1 configmap.go:109] updating configmap product-kubearchive-logging/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:17.432860 1 configmap.go:109] updating configmap application-service/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:18.330563 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:20.424004 1 configmap.go:109] updating configmap dora-metrics/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:42.868628 1 configmap.go:109] updating configmap openshift-adp/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:43.096828 1 configmap.go:109] updating configmap konflux-otel/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:43.710720 1 configmap.go:109] updating configmap openshift-kueue-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:44.713038 1 configmap.go:109] updating configmap repository-validator/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:49.745501 1 configmap.go:109] updating configmap build-templates-e2e/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:49.764798 1 configmap.go:109] updating configmap build-templates/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:50.596413 1 configmap.go:109] updating configmap tempo-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:50.750593 1 configmap.go:109] updating configmap smee-client/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:51.056859 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:51.109398 1 configmap.go:109] updating configmap appstudio-cardinality-exporter/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:51.576945 1 configmap.go:109] updating configmap appstudio-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:51.756391 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:53.784428 1 configmap.go:109] updating configmap application-api/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:55.325855 1 configmap.go:109] updating configmap mintmaker/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:56.644697 1 configmap.go:109] updating configmap appstudio-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0629 11:27:57.025477 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:03.593789 1 configmap.go:109] updating configmap konflux-rbac/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:05.244770 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration application-service-mutating-webhook-configuration with the service signing CA bundle I0629 11:28:05.284675 1 admissionwebhook.go:116] updating validatingwebhookconfiguration application-service-validating-webhook-configuration with the service signing CA bundle I0629 11:28:06.040488 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:08.663760 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration release-service-mutating-webhook-configuration with the service signing CA bundle I0629 11:28:08.690478 1 admissionwebhook.go:116] updating validatingwebhookconfiguration release-service-validating-webhook-configuration with the service signing CA bundle I0629 11:28:12.182051 1 configmap.go:109] updating configmap perf-team-prometheus-reader/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:15.640190 1 configmap.go:109] updating configmap dummy-service/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:16.858259 1 configmap.go:109] updating configmap konflux-dummy-deploy/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:16.902582 1 configmap.go:109] updating configmap internal-services/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:17.005575 1 configmap.go:109] updating configmap konflux-kite/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:19.944647 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0629 11:28:22.210529 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:22.213354 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:22.550141 1 configmap.go:109] updating configmap project-controller/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:24.624548 1 configmap.go:109] updating configmap image-rbac-proxy/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:34.784476 1 configmap.go:109] updating configmap crossplane-system/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:42.851331 1 configmap.go:109] updating configmap tekton-kueue/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:45.276211 1 configmap.go:109] updating configmap knative-eventing/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:55.992196 1 configmap.go:109] updating configmap konflux-perfscale-4-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:56.213250 1 configmap.go:109] updating configmap konflux-perfscale-3-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:56.237680 1 configmap.go:109] updating configmap managed-konflux-perfscale-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:56.248769 1 configmap.go:109] updating configmap konflux-perfscale-2-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 11:28:56.320251 1 configmap.go:109] updating configmap konflux-perfscale-1-tenant/openshift-service-ca.crt with the service signing CA bundle I0629 11:29:02.950593 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0629 11:29:03.597336 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I0629 11:29:06.635232 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0629 11:29:14.103039 1 configmap.go:109] updating configmap tempo-operator/tempo-tempo-serving-cabundle with the service signing CA bundle I0629 11:29:16.038958 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration integration-service-mutating-webhook-configuration with the service signing CA bundle I0629 11:29:16.081329 1 configmap.go:109] updating configmap appstudio-registry-exporter/openshift-service-ca.crt with the service signing CA bundle I0629 11:29:16.081329 1 admissionwebhook.go:116] updating validatingwebhookconfiguration integration-service-validating-webhook-configuration with the service signing CA bundle I0629 11:29:16.209694 1 configmap.go:109] updating configmap caching/openshift-service-ca.crt with the service signing CA bundle I0629 11:30:23.624326 1 configmap.go:109] updating configmap konflux-kyverno/openshift-service-ca.crt with the service signing CA bundle I0629 11:30:27.606502 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration kubearchive-mutating-webhook-configuration with the service signing CA bundle I0629 11:30:27.879784 1 admissionwebhook.go:116] updating validatingwebhookconfiguration kubearchive-validating-webhook-configuration with the service signing CA bundle I0629 11:30:47.299229 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0629 11:31:54.846205 1 configmap.go:109] updating configmap konflux-policies/openshift-service-ca.crt with the service signing CA bundle I0629 11:32:03.488338 1 configmap.go:109] updating configmap multi-platform-controller/openshift-service-ca.crt with the service signing CA bundle I0629 11:33:41.510737 1 configmap.go:109] updating configmap crossplane-connections/openshift-service-ca.crt with the service signing CA bundle I0629 11:34:02.027650 1 configmap.go:109] updating configmap konflux-disaster-recovery/openshift-service-ca.crt with the service signing CA bundle W0629 11:34:55.388695 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0629 11:40:29.926514 1 configmap.go:109] updating configmap e2e-secrets/openshift-service-ca.crt with the service signing CA bundle I0629 11:41:27.357135 1 configmap.go:109] updating configmap chains-e2e-nsqz/openshift-service-ca.crt with the service signing CA bundle I0629 11:41:27.696377 1 configmap.go:109] updating configmap upgrade-namespace/openshift-service-ca.crt with the service signing CA bundle I0629 11:48:31.820360 1 configmap.go:109] updating configmap dr-bc/openshift-service-ca.crt with the service signing CA bundle I0629 11:48:35.566367 1 configmap.go:109] updating configmap dr-test-moshekipod-backwards-compat-dr/openshift-service-ca.crt with the service signing CA bundle I0629 11:48:35.904359 1 configmap.go:109] updating configmap dr-test-kokohazamar-backwards-compat-dr/openshift-service-ca.crt with the service signing CA bundle I0629 11:48:37.452389 1 configmap.go:109] updating configmap dr-test-moshekipod-backwards-compat-dr-managed/openshift-service-ca.crt with the service signing CA bundle I0629 11:48:37.542443 1 configmap.go:109] updating configmap dr-test-kokohazamar-backwards-compat-dr-managed/openshift-service-ca.crt with the service signing CA bundle W0629 11:54:55.389251 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0629 12:14:55.389669 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0629 12:34:55.390847 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0629 12:54:55.391980 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"