W0216 13:37:23.084890 1 cmd.go:244] Using insecure, self-signed certificates I0216 13:37:23.085027 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1771249043 cert, and key in /tmp/serving-cert-443439634/serving-signer.crt, /tmp/serving-cert-443439634/serving-signer.key I0216 13:37:23.432594 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0216 13:37:23.432770 1 observer_polling.go:159] Starting file observer I0216 13:37:23.456102 1 builder.go:298] service-ca-controller version - I0216 13:37:23.456496 1 dynamic_serving_content.go:113] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-443439634/tls.crt::/tmp/serving-cert-443439634/tls.key" I0216 13:37:23.622701 1 requestheader_controller.go:244] Loaded a new request header values for RequestHeaderAuthRequestController I0216 13:37:23.626932 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0216 13:37:23.626944 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0216 13:37:23.626956 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0216 13:37:23.626960 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0216 13:37:23.629003 1 secure_serving.go:57] Forcing use of http/1.1 only I0216 13:37:23.629015 1 genericapiserver.go:523] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0216 13:37:23.629017 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0216 13:37:23.629025 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0216 13:37:23.629029 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0216 13:37:23.629031 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0216 13:37:23.629037 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0216 13:37:23.629039 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0216 13:37:23.634115 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0216 13:37:23.634133 1 leaderelection.go:250] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0216 13:37:23.634137 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0216 13:37:23.634150 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0216 13:37:23.634104 1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController I0216 13:37:23.634214 1 shared_informer.go:311] Waiting for caches to sync for RequestHeaderAuthRequestController I0216 13:37:23.634136 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0216 13:37:23.634289 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/tmp/serving-cert-443439634/tls.crt::/tmp/serving-cert-443439634/tls.key" I0216 13:37:23.634325 1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-443439634/tls.crt::/tmp/serving-cert-443439634/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1771249043\" (2026-02-16 13:37:22 +0000 UTC to 2026-03-18 13:37:23 +0000 UTC (now=2026-02-16 13:37:23.634299315 +0000 UTC))" I0216 13:37:23.634477 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1771249043\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1771249043\" (2026-02-16 12:37:23 +0000 UTC to 2027-02-16 12:37:23 +0000 UTC (now=2026-02-16 13:37:23.634457302 +0000 UTC))" I0216 13:37:23.634498 1 secure_serving.go:213] Serving securely on [::]:8443 I0216 13:37:23.634516 1 genericapiserver.go:671] [graceful-termination] waiting for shutdown to be initiated I0216 13:37:23.634516 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0216 13:37:23.636619 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:206 I0216 13:37:23.636731 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:172 I0216 13:37:23.636783 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:206 I0216 13:37:23.645245 1 leaderelection.go:260] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0216 13:37:23.645317 1 event.go:364] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"d1c20a81-c60f-4651-b9aa-c8b9d30aa34e", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10421", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d97fd49fb-fjlmv_b3c64600-1b51-49b0-942d-239bb71c9d91 became leader I0216 13:37:23.645824 1 base_controller.go:67] Waiting for caches to sync for APIServiceCABundleInjector I0216 13:37:23.645861 1 base_controller.go:67] Waiting for caches to sync for CRDCABundleInjector I0216 13:37:23.645869 1 base_controller.go:67] Waiting for caches to sync for MutatingWebhookCABundleInjector I0216 13:37:23.645875 1 base_controller.go:67] Waiting for caches to sync for ConfigMapCABundleInjector I0216 13:37:23.645882 1 base_controller.go:67] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0216 13:37:23.645971 1 base_controller.go:67] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0216 13:37:23.646212 1 base_controller.go:67] Waiting for caches to sync for ServiceServingCertUpdateController I0216 13:37:23.646244 1 base_controller.go:67] Waiting for caches to sync for ServiceServingCertController I0216 13:37:23.655226 1 reflector.go:351] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:159 I0216 13:37:23.655951 1 reflector.go:351] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:159 I0216 13:37:23.656016 1 reflector.go:351] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0216 13:37:23.656543 1 reflector.go:351] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:159 I0216 13:37:23.692930 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:159 I0216 13:37:23.734197 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0216 13:37:23.734293 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0216 13:37:23.734303 1 shared_informer.go:318] Caches are synced for RequestHeaderAuthRequestController I0216 13:37:23.734331 1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-02-16 13:25:59 +0000 UTC to 2036-02-14 13:25:59 +0000 UTC (now=2026-02-16 13:37:23.734313805 +0000 UTC))" I0216 13:37:23.734442 1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-443439634/tls.crt::/tmp/serving-cert-443439634/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1771249043\" (2026-02-16 13:37:22 +0000 UTC to 2026-03-18 13:37:23 +0000 UTC (now=2026-02-16 13:37:23.734422068 +0000 UTC))" I0216 13:37:23.734524 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1771249043\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1771249043\" (2026-02-16 12:37:23 +0000 UTC to 2027-02-16 12:37:23 +0000 UTC (now=2026-02-16 13:37:23.734515033 +0000 UTC))" I0216 13:37:23.734607 1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-02-16 13:25:59 +0000 UTC to 2036-02-14 13:25:59 +0000 UTC (now=2026-02-16 13:37:23.734599071 +0000 UTC))" I0216 13:37:23.734623 1 tlsconfig.go:178] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-02-16 13:26:00 +0000 UTC to 2036-02-14 13:26:00 +0000 UTC (now=2026-02-16 13:37:23.734614168 +0000 UTC))" I0216 13:37:23.734633 1 tlsconfig.go:178] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-02-16 13:26:00 +0000 UTC to 2036-02-14 13:26:00 +0000 UTC (now=2026-02-16 13:37:23.734626539 +0000 UTC))" I0216 13:37:23.734648 1 tlsconfig.go:178] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-02-16 13:26:01 +0000 UTC to 2036-02-14 13:26:01 +0000 UTC (now=2026-02-16 13:37:23.734636586 +0000 UTC))" I0216 13:37:23.734668 1 tlsconfig.go:178] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ogcn39imv3jofk544kalj7issf8hn7d-kx-03630c953f_customer-system-admin-signer@1771248372\" [] issuer=\"\" (2026-02-16 13:26:11 +0000 UTC to 2026-02-23 13:26:12 +0000 UTC (now=2026-02-16 13:37:23.734655502 +0000 UTC))" I0216 13:37:23.734691 1 tlsconfig.go:178] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ogcn39imv3jofk544kalj7issf8hn7d-kx-03630c953f_sre-system-admin-signer@1771248372\" [] issuer=\"\" (2026-02-16 13:26:11 +0000 UTC to 2026-02-23 13:26:12 +0000 UTC (now=2026-02-16 13:37:23.734678193 +0000 UTC))" I0216 13:37:23.734727 1 tlsconfig.go:178] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-02-16 13:25:59 +0000 UTC to 2036-02-14 13:25:59 +0000 UTC (now=2026-02-16 13:37:23.734699608 +0000 UTC))" I0216 13:37:23.734860 1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-443439634/tls.crt::/tmp/serving-cert-443439634/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1771249043\" (2026-02-16 13:37:22 +0000 UTC to 2026-03-18 13:37:23 +0000 UTC (now=2026-02-16 13:37:23.734847559 +0000 UTC))" I0216 13:37:23.734998 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1771249043\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1771249043\" (2026-02-16 12:37:23 +0000 UTC to 2027-02-16 12:37:23 +0000 UTC (now=2026-02-16 13:37:23.734983926 +0000 UTC))" I0216 13:37:23.743742 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:159 I0216 13:37:23.746296 1 base_controller.go:73] Caches are synced for MutatingWebhookCABundleInjector I0216 13:37:23.746306 1 base_controller.go:110] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0216 13:37:23.746310 1 base_controller.go:110] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0216 13:37:23.746313 1 base_controller.go:110] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0216 13:37:23.746312 1 base_controller.go:73] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0216 13:37:23.746322 1 base_controller.go:110] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0216 13:37:23.746327 1 base_controller.go:110] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0216 13:37:23.746330 1 base_controller.go:110] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0216 13:37:23.746316 1 base_controller.go:110] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0216 13:37:23.746338 1 base_controller.go:110] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0216 13:37:23.746342 1 base_controller.go:73] Caches are synced for ServiceServingCertController I0216 13:37:23.746333 1 base_controller.go:110] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0216 13:37:23.746349 1 base_controller.go:73] Caches are synced for ConfigMapCABundleInjector I0216 13:37:23.746348 1 base_controller.go:110] Starting #1 worker of ServiceServingCertController controller ... I0216 13:37:23.746352 1 base_controller.go:110] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0216 13:37:23.746359 1 base_controller.go:73] Caches are synced for APIServiceCABundleInjector I0216 13:37:23.746362 1 base_controller.go:110] Starting #1 worker of APIServiceCABundleInjector controller ... I0216 13:37:23.746353 1 base_controller.go:110] Starting #1 worker of ConfigMapCABundleInjector controller ... I0216 13:37:23.746365 1 base_controller.go:110] Starting #2 worker of APIServiceCABundleInjector controller ... I0216 13:37:23.746358 1 base_controller.go:73] Caches are synced for ValidatingWebhookCABundleInjector I0216 13:37:23.746368 1 base_controller.go:110] Starting #2 worker of ConfigMapCABundleInjector controller ... I0216 13:37:23.746371 1 base_controller.go:110] Starting #3 worker of ConfigMapCABundleInjector controller ... I0216 13:37:23.746373 1 base_controller.go:110] Starting #4 worker of ConfigMapCABundleInjector controller ... I0216 13:37:23.746367 1 base_controller.go:110] Starting #3 worker of APIServiceCABundleInjector controller ... I0216 13:37:23.746376 1 base_controller.go:110] Starting #5 worker of ConfigMapCABundleInjector controller ... I0216 13:37:23.746379 1 base_controller.go:110] Starting #4 worker of APIServiceCABundleInjector controller ... I0216 13:37:23.746378 1 base_controller.go:110] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0216 13:37:23.746382 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.746384 1 base_controller.go:110] Starting #5 worker of APIServiceCABundleInjector controller ... I0216 13:37:23.746388 1 base_controller.go:110] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0216 13:37:23.746392 1 base_controller.go:110] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0216 13:37:23.746396 1 base_controller.go:110] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0216 13:37:23.746399 1 base_controller.go:110] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0216 13:37:23.746402 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.746415 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.746354 1 base_controller.go:110] Starting #2 worker of ServiceServingCertController controller ... I0216 13:37:23.746437 1 base_controller.go:110] Starting #3 worker of ServiceServingCertController controller ... I0216 13:37:23.746441 1 base_controller.go:110] Starting #4 worker of ServiceServingCertController controller ... I0216 13:37:23.746445 1 base_controller.go:110] Starting #5 worker of ServiceServingCertController controller ... I0216 13:37:23.746443 1 base_controller.go:73] Caches are synced for ServiceServingCertUpdateController I0216 13:37:23.746455 1 base_controller.go:110] Starting #1 worker of ServiceServingCertUpdateController controller ... I0216 13:37:23.746395 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.746461 1 base_controller.go:110] Starting #2 worker of ServiceServingCertUpdateController controller ... I0216 13:37:23.746388 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.746497 1 admissionwebhook.go:116] updating validatingwebhookconfiguration snapshot.storage.k8s.io with the service signing CA bundle I0216 13:37:23.746420 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0216 13:37:23.746465 1 base_controller.go:110] Starting #3 worker of ServiceServingCertUpdateController controller ... I0216 13:37:23.746589 1 base_controller.go:110] Starting #4 worker of ServiceServingCertUpdateController controller ... I0216 13:37:23.746594 1 base_controller.go:110] Starting #5 worker of ServiceServingCertUpdateController controller ... I0216 13:37:23.761941 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.761944 1 configmap.go:109] updating configmap open-cluster-management-2ogcn39imv3jofk544kalj7issf8hn7d/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.763736 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.765842 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.765873 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.768316 1 reflector.go:351] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0216 13:37:23.774140 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0216 13:37:23.776721 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.777531 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.777997 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:23.846071 1 base_controller.go:73] Caches are synced for CRDCABundleInjector I0216 13:37:23.846082 1 base_controller.go:110] Starting #1 worker of CRDCABundleInjector controller ... I0216 13:37:23.846087 1 base_controller.go:110] Starting #2 worker of CRDCABundleInjector controller ... I0216 13:37:23.846089 1 base_controller.go:110] Starting #3 worker of CRDCABundleInjector controller ... I0216 13:37:23.846092 1 base_controller.go:110] Starting #4 worker of CRDCABundleInjector controller ... I0216 13:37:23.846094 1 base_controller.go:110] Starting #5 worker of CRDCABundleInjector controller ... I0216 13:37:23.846107 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0216 13:37:23.846126 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0216 13:37:23.857397 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:24.056744 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:24.262153 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:24.460281 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:24.658061 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:24.857824 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:25.058040 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:25.255338 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:25.457680 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:25.657746 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:25.855854 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:26.057031 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:26.256217 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:26.455143 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:26.657380 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:26.854098 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:27.057761 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:27.257863 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:27.455807 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0216 13:37:27.658901 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0216 13:37:27.658971 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:27.856802 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:28.057220 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:28.256653 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:28.456275 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:28.654365 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0216 13:37:28.855530 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:29.057429 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:29.254904 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:29.457992 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:29.657480 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:29.858277 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:30.057645 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:30.255644 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:30.458205 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0216 13:37:30.657568 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:30.857958 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:31.055786 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:31.258459 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:31.456707 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0216 13:37:31.655905 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:31.856311 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0216 13:37:32.058260 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:32.258008 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:32.456419 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:32.655246 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:32.859328 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:33.057519 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:33.254452 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:33.459540 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:33.657478 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:33.856395 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:34.057599 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:34.256175 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:34.455587 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:34.655099 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:34.857891 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:35.055726 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:35.255889 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:35.456831 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:35.653979 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:35.856977 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:36.055570 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:36.256527 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:36.455142 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:36.655725 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:36.856483 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:37.056115 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:37.262872 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:37.458232 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:37.655455 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:37.857670 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0216 13:37:50.279081 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0216 13:38:02.410449 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0216 13:38:02.431273 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0216 13:38:06.610000 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0216 13:38:06.627919 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0216 13:38:53.574582 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0216 13:45:49.460524 1 configmap.go:109] updating configmap minio-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:45:53.612773 1 configmap.go:109] updating configmap product-kubearchive/openshift-service-ca.crt with the service signing CA bundle I0216 13:45:54.716901 1 configmap.go:109] updating configmap tekton-logging/openshift-service-ca.crt with the service signing CA bundle I0216 13:45:55.797668 1 configmap.go:109] updating configmap tekton-results/openshift-service-ca.crt with the service signing CA bundle I0216 13:49:36.775192 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:32.145900 1 configmap.go:109] updating configmap quality-dashboard/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:35.691817 1 configmap.go:109] updating configmap ci-helper-app/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:36.839975 1 configmap.go:109] updating configmap product-kubearchive-logging/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:39.020432 1 configmap.go:109] updating configmap application-service/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:39.826966 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:41.739567 1 configmap.go:109] updating configmap dora-metrics/openshift-service-ca.crt with the service signing CA bundle I0216 13:50:58.662338 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:00.734346 1 configmap.go:109] updating configmap application-api/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:00.831210 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:01.603585 1 configmap.go:109] updating configmap image-rbac-proxy/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:02.386950 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:02.997239 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration application-service-mutating-webhook-configuration with the service signing CA bundle I0216 13:51:03.081137 1 admissionwebhook.go:116] updating validatingwebhookconfiguration application-service-validating-webhook-configuration with the service signing CA bundle I0216 13:51:03.164911 1 configmap.go:109] updating configmap tempo-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:03.286056 1 configmap.go:109] updating configmap repository-validator/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:04.198701 1 configmap.go:109] updating configmap project-controller/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:04.538303 1 configmap.go:109] updating configmap konflux-otel/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:04.897234 1 configmap.go:109] updating configmap build-templates-e2e/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:04.953599 1 configmap.go:109] updating configmap build-templates/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:05.291249 1 configmap.go:109] updating configmap openshift-kueue-operator/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:13.330826 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:15.824903 1 configmap.go:109] updating configmap konflux-kite/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:17.294495 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration release-service-mutating-webhook-configuration with the service signing CA bundle I0216 13:51:17.334275 1 admissionwebhook.go:116] updating validatingwebhookconfiguration release-service-validating-webhook-configuration with the service signing CA bundle I0216 13:51:18.118897 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration kubearchive-mutating-webhook-configuration with the service signing CA bundle I0216 13:51:18.149462 1 admissionwebhook.go:116] updating validatingwebhookconfiguration kubearchive-validating-webhook-configuration with the service signing CA bundle I0216 13:51:22.099136 1 configmap.go:109] updating configmap perf-team-prometheus-reader/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:23.186477 1 configmap.go:109] updating configmap appstudio-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:27.831337 1 configmap.go:109] updating configmap appstudio-registry-exporter/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:30.062295 1 configmap.go:109] updating configmap internal-services/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:30.437568 1 configmap.go:109] updating configmap konflux-rbac/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:31.995966 1 configmap.go:109] updating configmap dummy-service/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:34.573571 1 configmap.go:109] updating configmap knative-eventing/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:36.986704 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0216 13:51:41.077954 1 configmap.go:109] updating configmap mintmaker/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:45.784412 1 configmap.go:109] updating configmap crossplane-system/openshift-service-ca.crt with the service signing CA bundle I0216 13:51:54.758296 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0216 13:52:01.234434 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0216 13:52:02.703296 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0216 13:52:03.156253 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E0216 13:52:03.191578 1 base_controller.go:266] "CRDCABundleInjector" controller failed to sync "integrationtestscenarios.appstudio.redhat.com", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io "integrationtestscenarios.appstudio.redhat.com": the object has been modified; please apply your changes to the latest version and try again I0216 13:52:03.191605 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle E0216 13:52:03.223434 1 base_controller.go:266] "CRDCABundleInjector" controller failed to sync "integrationtestscenarios.appstudio.redhat.com", err: Operation cannot be fulfilled on customresourcedefinitions.apiextensions.k8s.io "integrationtestscenarios.appstudio.redhat.com": the object has been modified; please apply your changes to the latest version and try again I0216 13:52:03.223455 1 crd.go:69] updating customresourcedefinition integrationtestscenarios.appstudio.redhat.com conversion webhook config with the service signing CA bundle I0216 13:52:10.664155 1 admissionwebhook.go:116] updating mutatingwebhookconfiguration integration-service-mutating-webhook-configuration with the service signing CA bundle I0216 13:52:10.786488 1 admissionwebhook.go:116] updating validatingwebhookconfiguration integration-service-validating-webhook-configuration with the service signing CA bundle I0216 13:52:53.362953 1 configmap.go:109] updating configmap appstudio-grafana/openshift-service-ca.crt with the service signing CA bundle I0216 13:52:53.522822 1 configmap.go:109] updating configmap caching/openshift-service-ca.crt with the service signing CA bundle I0216 13:52:56.782229 1 configmap.go:109] updating configmap tempo-operator/tempo-tempo-serving-cabundle with the service signing CA bundle I0216 13:53:28.879302 1 configmap.go:109] updating configmap konflux-kyverno/openshift-service-ca.crt with the service signing CA bundle I0216 13:53:37.838661 1 configmap.go:109] updating configmap crossplane-connections/openshift-service-ca.crt with the service signing CA bundle I0216 13:54:08.637893 1 configmap.go:109] updating configmap appstudio-grafana-datasource-exporter/openshift-service-ca.crt with the service signing CA bundle I0216 13:54:14.356794 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0216 13:54:32.881817 1 configmap.go:109] updating configmap appstudio-probe-monitoring-grafana/openshift-service-ca.crt with the service signing CA bundle I0216 13:54:34.360912 1 configmap.go:109] updating configmap konflux-policies/openshift-service-ca.crt with the service signing CA bundle I0216 13:54:39.178449 1 configmap.go:109] updating configmap multi-platform-controller/openshift-service-ca.crt with the service signing CA bundle I0216 13:57:07.055929 1 configmap.go:109] updating configmap tekton-kueue/openshift-service-ca.crt with the service signing CA bundle I0216 13:57:12.787526 1 configmap.go:109] updating configmap kueue-external-admission/openshift-service-ca.crt with the service signing CA bundle W0216 13:57:23.768888 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0216 14:00:03.017053 1 configmap.go:109] updating configmap e2e-secrets/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:10.434489 1 configmap.go:109] updating configmap konflux-vtff/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:10.498319 1 configmap.go:109] updating configmap upgrade-namespace/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:11.532705 1 configmap.go:109] updating configmap happy-path-rich/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:11.532761 1 configmap.go:109] updating configmap group-rrvy/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:11.544527 1 configmap.go:109] updating configmap rel-plan-admis-qrar/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:11.544558 1 configmap.go:109] updating configmap tenant-dev-hztm/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:11.552218 1 configmap.go:109] updating configmap stat-rep-hcvc/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:12.149194 1 configmap.go:109] updating configmap chains-e2e-kctk/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:12.314140 1 configmap.go:109] updating configmap gitlab-rep-ngks/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:12.445452 1 configmap.go:109] updating configmap build-e2e-khfp/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:12.527651 1 configmap.go:109] updating configmap neg-rp-dev-ajgf/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:12.619103 1 configmap.go:109] updating configmap block-rp-dev-lala/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:12.623310 1 configmap.go:109] updating configmap integration1-ukcy/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:13.533780 1 configmap.go:109] updating configmap konflux-vtff-managed/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:15.148812 1 configmap.go:109] updating configmap neg-rp-managed/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:15.630608 1 configmap.go:109] updating configmap happy-path-managed/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:18.687806 1 configmap.go:109] updating configmap plan-and-admission-managed/openshift-service-ca.crt with the service signing CA bundle I0216 14:02:25.532255 1 configmap.go:109] updating configmap block-rp-managed/openshift-service-ca.crt with the service signing CA bundle W0216 14:17:23.770203 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0216 14:21:53.272376 1 configmap.go:109] updating configmap integration2-isns/openshift-service-ca.crt with the service signing CA bundle W0216 14:37:23.771580 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"