Copying system trust bundle W0428 12:59:29.011554 1 cmd.go:167] Unable to read initial content of "/tmp/terminate": open /tmp/terminate: no such file or directory I0428 12:59:29.012266 1 observer_polling.go:159] Starting file observer I0428 12:59:29.012322 1 cmd.go:253] Using service-serving-cert provided certificates I0428 12:59:29.012354 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0428 12:59:29.012658 1 observer_polling.go:159] Starting file observer I0428 12:59:29.031780 1 builder.go:304] cluster-authentication-operator version - I0428 12:59:29.032330 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0428 12:59:29.698374 1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController I0428 12:59:29.705628 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0428 12:59:29.705647 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0428 12:59:29.705682 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0428 12:59:29.705687 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0428 12:59:29.709237 1 secure_serving.go:57] Forcing use of http/1.1 only W0428 12:59:29.709270 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. I0428 12:59:29.709257 1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0428 12:59:29.709275 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0428 12:59:29.709289 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0428 12:59:29.709292 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0428 12:59:29.709294 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0428 12:59:29.709296 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0428 12:59:29.719874 1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController I0428 12:59:29.720050 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0428 12:59:29.720100 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0428 12:59:29.720519 1 leaderelection.go:254] attempting to acquire leader lease openshift-authentication-operator/cluster-authentication-operator-lock... I0428 12:59:29.720006 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0428 12:59:29.720781 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 12:59:29.719981 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0428 12:59:29.720794 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 12:59:29.720318 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0428 12:59:29.720904 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0428 12:59:29.721550 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:08 +0000 UTC to 2028-04-27 11:49:09 +0000 UTC (now=2026-04-28 12:59:29.721519223 +0000 UTC))" I0428 12:59:29.721743 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777381169\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777381169\" (2026-04-28 11:59:29 +0000 UTC to 2027-04-28 11:59:29 +0000 UTC (now=2026-04-28 12:59:29.721722348 +0000 UTC))" I0428 12:59:29.721782 1 secure_serving.go:213] Serving securely on [::]:8443 I0428 12:59:29.721814 1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated I0428 12:59:29.721847 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0428 12:59:29.723585 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0428 12:59:29.724252 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0428 12:59:29.725023 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175 I0428 12:59:29.740761 1 leaderelection.go:268] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock I0428 12:59:29.741521 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"65714c41-74ce-4ad7-8907-5e435fa3a381", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"45731", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' authentication-operator-6664695455-dvfdb_fe305dae-4e6c-4a50-b903-7852d96f6869 became leader I0428 12:59:29.845313 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 12:59:29.845377 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0428 12:59:29.845386 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 12:59:29.860328 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 11:33:39 +0000 UTC to 2026-04-29 11:33:39 +0000 UTC (now=2026-04-28 12:59:29.854364892 +0000 UTC))" I0428 12:59:29.860564 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:08 +0000 UTC to 2028-04-27 11:49:09 +0000 UTC (now=2026-04-28 12:59:29.86053742 +0000 UTC))" I0428 12:59:29.860713 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777381169\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777381169\" (2026-04-28 11:59:29 +0000 UTC to 2027-04-28 11:59:29 +0000 UTC (now=2026-04-28 12:59:29.860693435 +0000 UTC))" I0428 12:59:29.860874 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 11:33:37 +0000 UTC to 2036-04-25 11:33:37 +0000 UTC (now=2026-04-28 12:59:29.860855043 +0000 UTC))" I0428 12:59:29.860895 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"\" (2026-04-28 11:33:41 +0000 UTC to 2026-04-29 11:33:41 +0000 UTC (now=2026-04-28 12:59:29.860882025 +0000 UTC))" I0428 12:59:29.860912 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-28 11:33:41 +0000 UTC to 2027-04-28 11:33:41 +0000 UTC (now=2026-04-28 12:59:29.860900296 +0000 UTC))" I0428 12:59:29.860931 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-28 11:33:42 +0000 UTC to 2027-04-28 11:33:42 +0000 UTC (now=2026-04-28 12:59:29.860918409 +0000 UTC))" I0428 12:59:29.860947 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 11:33:38 +0000 UTC to 2036-04-25 11:33:38 +0000 UTC (now=2026-04-28 12:59:29.860935595 +0000 UTC))" I0428 12:59:29.860964 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777376945\" [] issuer=\"kubelet-signer\" (2026-04-28 11:49:04 +0000 UTC to 2026-04-29 11:33:41 +0000 UTC (now=2026-04-28 12:59:29.86095234 +0000 UTC))" I0428 12:59:29.860988 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777376944\" [] issuer=\"\" (2026-04-28 11:49:03 +0000 UTC to 2027-04-28 11:49:04 +0000 UTC (now=2026-04-28 12:59:29.860967866 +0000 UTC))" I0428 12:59:29.861004 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 11:33:39 +0000 UTC to 2026-04-29 11:33:39 +0000 UTC (now=2026-04-28 12:59:29.860993346 +0000 UTC))" I0428 12:59:29.861148 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:08 +0000 UTC to 2028-04-27 11:49:09 +0000 UTC (now=2026-04-28 12:59:29.861130987 +0000 UTC))" I0428 12:59:29.861279 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777381169\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777381169\" (2026-04-28 11:59:29 +0000 UTC to 2027-04-28 11:59:29 +0000 UTC (now=2026-04-28 12:59:29.861263832 +0000 UTC))" I0428 12:59:30.061952 1 base_controller.go:76] Waiting for caches to sync for authentication-ManagementState I0428 12:59:30.065810 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-Metadata I0428 12:59:30.068498 1 base_controller.go:76] Waiting for caches to sync for OAuthClientsController I0428 12:59:30.068557 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-PayloadConfig I0428 12:59:30.068585 1 base_controller.go:76] Waiting for caches to sync for RouterCertsDomainValidationController I0428 12:59:30.069246 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-ServiceCA I0428 12:59:30.069507 1 base_controller.go:76] Waiting for caches to sync for OpenshiftAuthenticationStaticResources-StaticResources I0428 12:59:30.069550 1 base_controller.go:76] Waiting for caches to sync for WellKnownReadyController I0428 12:59:30.069593 1 base_controller.go:76] Waiting for caches to sync for OAuthServerRouteEndpointAccessibleController I0428 12:59:30.069628 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointAccessibleController I0428 12:59:30.069659 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointsEndpointAccessibleController I0428 12:59:30.069691 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressNodesAvailable I0428 12:59:30.070959 1 base_controller.go:76] Waiting for caches to sync for oauth-server I0428 12:59:30.070971 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-UnsupportedConfigOverrides I0428 12:59:30.070982 1 base_controller.go:76] Waiting for caches to sync for LoggingSyncer I0428 12:59:30.070992 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0428 12:59:30.071002 1 base_controller.go:76] Waiting for caches to sync for OAuthServer-WorkloadWorkloadController I0428 12:59:30.044555 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionCondition I0428 12:59:30.082250 1 base_controller.go:76] Waiting for caches to sync for APIServerStaticResources-StaticResources I0428 12:59:30.082277 1 base_controller.go:76] Waiting for caches to sync for ProxyConfigController I0428 12:59:30.082291 1 base_controller.go:76] Waiting for caches to sync for CustomRouteController I0428 12:59:30.082305 1 base_controller.go:76] Waiting for caches to sync for TrustDistributionController I0428 12:59:30.082326 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-RemoveStaleConditions I0428 12:59:30.082342 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressState I0428 12:59:30.082356 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0428 12:59:30.082378 1 base_controller.go:76] Waiting for caches to sync for OpenShiftAuthenticatorCertRequester I0428 12:59:30.082394 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorController I0428 12:59:30.082407 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0428 12:59:30.082421 1 base_controller.go:76] Waiting for caches to sync for SecretRevisionPruneController I0428 12:59:30.082433 1 base_controller.go:76] Waiting for caches to sync for RevisionController I0428 12:59:30.082460 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionPrune I0428 12:59:30.082584 1 base_controller.go:76] Waiting for caches to sync for StatusSyncer_authentication I0428 12:59:30.082598 1 base_controller.go:76] Waiting for caches to sync for OAuthAPIServerController-WorkloadWorkloadController I0428 12:59:30.082610 1 base_controller.go:76] Waiting for caches to sync for openshift-apiserver-APIService I0428 12:59:30.082627 1 base_controller.go:76] Waiting for caches to sync for auditPolicyController I0428 12:59:30.082638 1 base_controller.go:76] Waiting for caches to sync for NamespaceFinalizerController_openshift-oauth-apiserver I0428 12:59:30.082671 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionState I0428 12:59:30.082686 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionMigration I0428 12:59:30.082699 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionKey I0428 12:59:30.150641 1 reflector.go:368] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.151900 1 reflector.go:368] Caches populated for *v1.Role from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.152247 1 reflector.go:368] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.156754 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.172590 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.173189 1 reflector.go:368] Caches populated for *v1.RoleBinding from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.181903 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.185517 1 reflector.go:368] Caches populated for operator.openshift.io/v1, Resource=authentications from k8s.io/client-go/dynamic/dynamicinformer/informer.go:108 I0428 12:59:30.201438 1 base_controller.go:82] Caches are synced for openshift-authentication-RemoveStaleConditions I0428 12:59:30.234805 1 base_controller.go:119] Starting #1 worker of openshift-authentication-RemoveStaleConditions controller ... I0428 12:59:30.235072 1 reflector.go:368] Caches populated for *v1.OAuthClient from github.com/openshift/client-go/oauth/informers/externalversions/factory.go:125 I0428 12:59:30.235430 1 reflector.go:368] Caches populated for *v1.Authentication from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.203594 1 reflector.go:368] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.207272 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.207349 1 reflector.go:368] Caches populated for *v1.DaemonSet from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.224528 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.225289 1 reflector.go:368] Caches populated for *v1.OAuth from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.226724 1 reflector.go:368] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.226992 1 reflector.go:368] Caches populated for *v1.Console from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.231958 1 reflector.go:368] Caches populated for *v1.Ingress from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.232712 1 reflector.go:368] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0428 12:59:30.232987 1 reflector.go:368] Caches populated for *v1.APIServer from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.233479 1 reflector.go:368] Caches populated for *v1.Proxy from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.234513 1 reflector.go:368] Caches populated for *v1.CertificateSigningRequest from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.234440 1 reflector.go:368] Caches populated for *v1alpha1.StorageVersionMigration from sigs.k8s.io/kube-storage-version-migrator/pkg/clients/informer/factory.go:132 I0428 12:59:30.236653 1 reflector.go:368] Caches populated for *v1.Route from github.com/openshift/client-go/route/informers/externalversions/factory.go:125 I0428 12:59:30.246501 1 reflector.go:368] Caches populated for *v1.ClusterVersion from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.247643 1 reflector.go:368] Caches populated for *v1.Infrastructure from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.253161 1 reflector.go:368] Caches populated for *v1.IngressController from github.com/openshift/client-go/operator/informers/externalversions/factory.go:125 I0428 12:59:30.261786 1 reflector.go:368] Caches populated for *v1.ClusterRoleBinding from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.262391 1 reflector.go:368] Caches populated for *v1.ClusterOperator from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:59:30.262828 1 base_controller.go:82] Caches are synced for authentication-ManagementState I0428 12:59:30.262862 1 base_controller.go:119] Starting #1 worker of authentication-ManagementState controller ... I0428 12:59:30.269928 1 base_controller.go:82] Caches are synced for OAuthClientsController I0428 12:59:30.270000 1 base_controller.go:119] Starting #1 worker of OAuthClientsController controller ... I0428 12:59:30.283715 1 base_controller.go:82] Caches are synced for openshift-authentication-UnsupportedConfigOverrides I0428 12:59:30.283898 1 base_controller.go:119] Starting #1 worker of openshift-authentication-UnsupportedConfigOverrides controller ... I0428 12:59:30.284436 1 reflector.go:368] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.294311 1 base_controller.go:82] Caches are synced for LoggingSyncer I0428 12:59:30.294329 1 base_controller.go:119] Starting #1 worker of LoggingSyncer controller ... I0428 12:59:30.294695 1 base_controller.go:82] Caches are synced for APIServerStaticResources-StaticResources I0428 12:59:30.294704 1 base_controller.go:119] Starting #1 worker of APIServerStaticResources-StaticResources controller ... I0428 12:59:30.294736 1 base_controller.go:82] Caches are synced for OpenShiftAuthenticatorCertRequester I0428 12:59:30.294740 1 base_controller.go:119] Starting #1 worker of OpenShiftAuthenticatorCertRequester controller ... I0428 12:59:30.294768 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0428 12:59:30.294773 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorCertApprover_OpenShiftAuthenticator controller ... I0428 12:59:30.294784 1 base_controller.go:82] Caches are synced for SecretRevisionPruneController I0428 12:59:30.294789 1 base_controller.go:119] Starting #1 worker of SecretRevisionPruneController controller ... I0428 12:59:30.294829 1 base_controller.go:82] Caches are synced for RevisionController I0428 12:59:30.294833 1 base_controller.go:119] Starting #1 worker of RevisionController controller ... I0428 12:59:30.294846 1 base_controller.go:82] Caches are synced for StatusSyncer_authentication I0428 12:59:30.294851 1 base_controller.go:119] Starting #1 worker of StatusSyncer_authentication controller ... I0428 12:59:30.294869 1 base_controller.go:82] Caches are synced for auditPolicyController I0428 12:59:30.294873 1 base_controller.go:119] Starting #1 worker of auditPolicyController controller ... I0428 12:59:30.294901 1 base_controller.go:82] Caches are synced for NamespaceFinalizerController_openshift-oauth-apiserver I0428 12:59:30.294904 1 base_controller.go:119] Starting #1 worker of NamespaceFinalizerController_openshift-oauth-apiserver controller ... I0428 12:59:30.304736 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.318172 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'FastControllerResync' Controller "auditPolicyController" resync interval is set to 10s which might lead to client request throttling I0428 12:59:30.329006 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.470729 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.689247 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.770330 1 base_controller.go:82] Caches are synced for WellKnownReadyController I0428 12:59:30.770405 1 base_controller.go:119] Starting #1 worker of WellKnownReadyController controller ... I0428 12:59:30.906832 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:59:30.971297 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointsEndpointAccessibleController I0428 12:59:30.971321 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointsEndpointAccessibleController controller ... I0428 12:59:31.066543 1 request.go:700] Waited for 1.005317945s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/endpoints?limit=500&resourceVersion=0 I0428 12:59:31.069682 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:59:31.280097 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0428 12:59:31.283998 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorController I0428 12:59:31.284073 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorController controller ... I0428 12:59:31.499119 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:31.582560 1 base_controller.go:82] Caches are synced for ProxyConfigController I0428 12:59:31.582667 1 base_controller.go:119] Starting #1 worker of ProxyConfigController controller ... I0428 12:59:31.683932 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:31.872974 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:32.068523 1 reflector.go:368] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0428 12:59:32.085537 1 base_controller.go:82] Caches are synced for OAuthAPIServerController-WorkloadWorkloadController I0428 12:59:32.085560 1 base_controller.go:119] Starting #1 worker of OAuthAPIServerController-WorkloadWorkloadController controller ... I0428 12:59:32.265962 1 request.go:700] Waited for 2.204257532s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/configmaps?limit=500&resourceVersion=0 I0428 12:59:32.271990 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:32.283442 1 base_controller.go:82] Caches are synced for openshift-apiserver-APIService I0428 12:59:32.283551 1 base_controller.go:119] Starting #1 worker of openshift-apiserver-APIService controller ... I0428 12:59:32.284095 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'FastControllerResync' Controller "openshift-apiserver-APIService" resync interval is set to 10s which might lead to client request throttling I0428 12:59:32.478053 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:32.483008 1 base_controller.go:82] Caches are synced for TrustDistributionController I0428 12:59:32.483027 1 base_controller.go:119] Starting #1 worker of TrustDistributionController controller ... I0428 12:59:32.569522 1 base_controller.go:82] Caches are synced for openshift-authentication-Metadata I0428 12:59:32.569545 1 base_controller.go:119] Starting #1 worker of openshift-authentication-Metadata controller ... I0428 12:59:32.569576 1 base_controller.go:82] Caches are synced for RouterCertsDomainValidationController I0428 12:59:32.569580 1 base_controller.go:119] Starting #1 worker of RouterCertsDomainValidationController controller ... I0428 12:59:32.578750 1 base_controller.go:82] Caches are synced for OAuthServerRouteEndpointAccessibleController I0428 12:59:32.578772 1 base_controller.go:119] Starting #1 worker of OAuthServerRouteEndpointAccessibleController controller ... I0428 12:59:32.750976 1 reflector.go:368] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0428 12:59:32.874379 1 reflector.go:368] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0428 12:59:33.066746 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0428 12:59:33.070059 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointAccessibleController I0428 12:59:33.070088 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointAccessibleController controller ... I0428 12:59:33.070121 1 base_controller.go:82] Caches are synced for openshift-authentication-PayloadConfig I0428 12:59:33.070138 1 base_controller.go:119] Starting #1 worker of openshift-authentication-PayloadConfig controller ... I0428 12:59:33.070160 1 base_controller.go:82] Caches are synced for openshift-authentication-ServiceCA I0428 12:59:33.070176 1 base_controller.go:119] Starting #1 worker of openshift-authentication-ServiceCA controller ... I0428 12:59:33.070273 1 base_controller.go:82] Caches are synced for OpenshiftAuthenticationStaticResources-StaticResources I0428 12:59:33.070294 1 base_controller.go:119] Starting #1 worker of OpenshiftAuthenticationStaticResources-StaticResources controller ... I0428 12:59:33.267203 1 reflector.go:368] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0428 12:59:33.283876 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressState I0428 12:59:33.283898 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressState controller ... I0428 12:59:33.464541 1 request.go:700] Waited for 3.401634017s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config/configmaps?limit=500&resourceVersion=0 I0428 12:59:33.570729 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:33.679888 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:33.683627 1 base_controller.go:82] Caches are synced for ConfigObserver I0428 12:59:33.683707 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0428 12:59:33.683751 1 base_controller.go:82] Caches are synced for CustomRouteController I0428 12:59:33.683784 1 base_controller.go:119] Starting #1 worker of CustomRouteController controller ... I0428 12:59:33.868635 1 reflector.go:368] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0428 12:59:33.886416 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionCondition I0428 12:59:33.886534 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionCondition controller ... I0428 12:59:33.886575 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressNodesAvailable I0428 12:59:33.886606 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressNodesAvailable controller ... I0428 12:59:33.886639 1 base_controller.go:82] Caches are synced for OAuthServer-WorkloadWorkloadController I0428 12:59:33.886656 1 base_controller.go:119] Starting #1 worker of OAuthServer-WorkloadWorkloadController controller ... I0428 12:59:33.901561 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionPrune I0428 12:59:33.901759 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionPrune controller ... I0428 12:59:33.901729 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionState I0428 12:59:33.901873 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionState controller ... I0428 12:59:33.901743 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionMigration I0428 12:59:33.903036 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionMigration controller ... I0428 12:59:33.935896 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionKey I0428 12:59:33.935916 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionKey controller ... I0428 12:59:34.073463 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:59:34.288993 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:59:34.383853 1 base_controller.go:82] Caches are synced for oauth-server I0428 12:59:34.383954 1 base_controller.go:119] Starting #1 worker of oauth-server controller ... I0428 12:59:34.464705 1 request.go:700] Waited for 4.401406639s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-etcd/endpoints?limit=500&resourceVersion=0 I0428 12:59:34.468692 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:59:34.489380 1 base_controller.go:82] Caches are synced for ConfigObserver I0428 12:59:34.489401 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0428 12:59:35.465001 1 request.go:700] Waited for 5.146806221s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0428 12:59:36.465100 1 request.go:700] Waited for 3.894916811s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs I0428 12:59:37.465439 1 request.go:700] Waited for 4.181362553s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift I0428 12:59:38.665254 1 request.go:700] Waited for 1.784891399s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0428 12:59:39.866596 1 request.go:700] Waited for 1.58860209s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle W0428 12:59:52.892437 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:59:52.892473 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 12:59:52.892479 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:59:52.892483 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:59:53.051262 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 3/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:59:53.084362 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available" to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 3/3 pods have been updated to the latest generation and 2/3 pods are available" I0428 12:59:54.064277 1 request.go:700] Waited for 1.111373057s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0428 12:59:55.070590 1 request.go:700] Waited for 1.974587519s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0428 12:59:56.265074 1 request.go:700] Waited for 1.575237641s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0428 12:59:57.466567 1 request.go:700] Waited for 1.525161116s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0428 12:59:58.665580 1 request.go:700] Waited for 1.347815454s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system W0428 13:00:23.272347 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 13:00:23.272470 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 13:00:23.272476 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0428 13:00:23.272481 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 13:00:23.272487 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 13:00:23.337990 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T13:00:23Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 13:00:23.392782 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing changed from True to False ("AuthenticatorCertKeyProgressing: All is well") I0428 13:00:24.490528 1 request.go:700] Waited for 1.151669389s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit I0428 13:00:25.689430 1 request.go:700] Waited for 1.587547014s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system W0428 13:00:39.623631 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 13:00:39.623655 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0428 13:00:39.623661 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 13:00:39.623665 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 13:00:39.652232 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-858c988757-5qdvp pod)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T13:00:23Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 13:00:39.672045 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-858c988757-5qdvp pod)" I0428 13:00:40.805650 1 request.go:700] Waited for 1.138456032s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit I0428 13:00:41.806147 1 request.go:700] Waited for 1.449274586s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0428 13:00:43.005359 1 request.go:700] Waited for 1.593403638s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/serviceaccounts/oauth-apiserver-sa W0428 13:00:43.616371 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 13:00:43.616389 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 13:00:43.616392 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0428 13:00:43.616396 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 13:00:43.616400 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 13:00:43.640707 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T13:00:23Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 13:00:43.663590 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-858c988757-5qdvp pod)" to "All is well" I0428 13:00:44.806102 1 request.go:700] Waited for 1.154114626s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0428 13:00:46.006993 1 request.go:700] Waited for 1.598077868s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0428 13:09:31.354406 1 request.go:700] Waited for 1.093525339s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift I0428 13:09:32.555116 1 request.go:700] Waited for 2.197770164s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle I0428 13:09:33.755098 1 request.go:700] Waited for 2.196404353s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/configmaps/oauth-serving-cert I0428 13:09:34.755118 1 request.go:700] Waited for 2.267918073s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-metadata I0428 13:09:35.954757 1 request.go:700] Waited for 2.388638751s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0428 13:09:37.155138 1 request.go:700] Waited for 2.197292198s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/etcd-serving-ca I0428 13:09:38.354587 1 request.go:700] Waited for 1.196195032s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle