Copying system trust bundle W0428 12:54:08.546341 1 cmd.go:167] Unable to read initial content of "/tmp/terminate": open /tmp/terminate: no such file or directory I0428 12:54:08.546992 1 cmd.go:253] Using service-serving-cert provided certificates I0428 12:54:08.547016 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0428 12:54:08.547344 1 observer_polling.go:159] Starting file observer I0428 12:54:08.547676 1 observer_polling.go:159] Starting file observer I0428 12:54:12.189110 1 builder.go:304] cluster-authentication-operator version - I0428 12:54:12.190951 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0428 12:54:25.541233 1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController I0428 12:54:25.682226 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0428 12:54:25.682303 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0428 12:54:25.682340 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0428 12:54:25.682358 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0428 12:54:25.716224 1 secure_serving.go:57] Forcing use of http/1.1 only W0428 12:54:25.716247 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0428 12:54:25.716251 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0428 12:54:25.716256 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0428 12:54:25.716259 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0428 12:54:25.716262 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0428 12:54:25.716265 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0428 12:54:25.716489 1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I0428 12:54:25.797959 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:08 +0000 UTC to 2028-04-27 11:49:09 +0000 UTC (now=2026-04-28 12:54:25.797906263 +0000 UTC))" I0428 12:54:25.800554 1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController I0428 12:54:25.800701 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0428 12:54:25.800638 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0428 12:54:25.800659 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0428 12:54:25.800955 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 12:54:25.800671 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0428 12:54:25.800994 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 12:54:25.801147 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0428 12:54:25.801172 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0428 12:54:25.854018 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175 I0428 12:54:25.855578 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0428 12:54:25.864496 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777380855\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777380854\" (2026-04-28 11:54:12 +0000 UTC to 2027-04-28 11:54:12 +0000 UTC (now=2026-04-28 12:54:25.86446245 +0000 UTC))" I0428 12:54:25.864566 1 secure_serving.go:213] Serving securely on [::]:8443 I0428 12:54:25.864587 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0428 12:54:25.864617 1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated I0428 12:54:25.864677 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0428 12:54:25.901498 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0428 12:54:25.901631 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 12:54:25.901651 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 12:54:25.901829 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 11:33:39 +0000 UTC to 2026-04-29 11:33:39 +0000 UTC (now=2026-04-28 12:54:25.901801758 +0000 UTC))" I0428 12:54:25.902054 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:08 +0000 UTC to 2028-04-27 11:49:09 +0000 UTC (now=2026-04-28 12:54:25.902031546 +0000 UTC))" I0428 12:54:25.902239 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777380855\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777380854\" (2026-04-28 11:54:12 +0000 UTC to 2027-04-28 11:54:12 +0000 UTC (now=2026-04-28 12:54:25.902218829 +0000 UTC))" I0428 12:54:25.919932 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 11:33:37 +0000 UTC to 2036-04-25 11:33:37 +0000 UTC (now=2026-04-28 12:54:25.919879732 +0000 UTC))" I0428 12:54:25.920029 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"\" (2026-04-28 11:33:41 +0000 UTC to 2026-04-29 11:33:41 +0000 UTC (now=2026-04-28 12:54:25.920011561 +0000 UTC))" I0428 12:54:25.920087 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-28 11:33:41 +0000 UTC to 2027-04-28 11:33:41 +0000 UTC (now=2026-04-28 12:54:25.920050813 +0000 UTC))" I0428 12:54:25.920116 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-28 11:33:42 +0000 UTC to 2027-04-28 11:33:42 +0000 UTC (now=2026-04-28 12:54:25.920104723 +0000 UTC))" I0428 12:54:25.920145 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 11:33:38 +0000 UTC to 2036-04-25 11:33:38 +0000 UTC (now=2026-04-28 12:54:25.92013303 +0000 UTC))" I0428 12:54:25.920185 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777376945\" [] issuer=\"kubelet-signer\" (2026-04-28 11:49:04 +0000 UTC to 2026-04-29 11:33:41 +0000 UTC (now=2026-04-28 12:54:25.920173503 +0000 UTC))" I0428 12:54:25.920215 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777376944\" [] issuer=\"\" (2026-04-28 11:49:03 +0000 UTC to 2027-04-28 11:49:04 +0000 UTC (now=2026-04-28 12:54:25.920202299 +0000 UTC))" I0428 12:54:25.920262 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 11:33:39 +0000 UTC to 2026-04-29 11:33:39 +0000 UTC (now=2026-04-28 12:54:25.92025127 +0000 UTC))" I0428 12:54:25.920505 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:08 +0000 UTC to 2028-04-27 11:49:09 +0000 UTC (now=2026-04-28 12:54:25.920484957 +0000 UTC))" I0428 12:54:25.920703 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777380855\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777380854\" (2026-04-28 11:54:12 +0000 UTC to 2027-04-28 11:54:12 +0000 UTC (now=2026-04-28 12:54:25.920674955 +0000 UTC))" I0428 12:54:26.146729 1 leaderelection.go:254] attempting to acquire leader lease openshift-authentication-operator/cluster-authentication-operator-lock... I0428 12:56:56.060717 1 leaderelection.go:268] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock I0428 12:56:56.061009 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"65714c41-74ce-4ad7-8907-5e435fa3a381", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"39079", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' authentication-operator-6664695455-dvfdb_b8f76a95-ec91-49e7-a95e-e5b4f064e98b became leader I0428 12:56:56.134933 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-UnsupportedConfigOverrides I0428 12:56:56.134940 1 base_controller.go:76] Waiting for caches to sync for OAuthAPIServerController-WorkloadWorkloadController I0428 12:56:56.135216 1 base_controller.go:76] Waiting for caches to sync for OAuthServer-WorkloadWorkloadController I0428 12:56:56.135302 1 base_controller.go:76] Waiting for caches to sync for authentication-ManagementState I0428 12:56:56.135434 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-Metadata I0428 12:56:56.135561 1 base_controller.go:76] Waiting for caches to sync for OAuthClientsController I0428 12:56:56.135592 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-PayloadConfig I0428 12:56:56.135616 1 base_controller.go:76] Waiting for caches to sync for RouterCertsDomainValidationController I0428 12:56:56.135728 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-ServiceCA I0428 12:56:56.136220 1 base_controller.go:76] Waiting for caches to sync for WellKnownReadyController I0428 12:56:56.136326 1 base_controller.go:76] Waiting for caches to sync for OAuthServerRouteEndpointAccessibleController I0428 12:56:56.136436 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointAccessibleController I0428 12:56:56.136560 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointsEndpointAccessibleController I0428 12:56:56.136674 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressNodesAvailable I0428 12:56:56.136825 1 base_controller.go:76] Waiting for caches to sync for CustomRouteController I0428 12:56:56.136927 1 base_controller.go:76] Waiting for caches to sync for TrustDistributionController I0428 12:56:56.137007 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-RemoveStaleConditions I0428 12:56:56.137090 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressState I0428 12:56:56.137170 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0428 12:56:56.137258 1 base_controller.go:76] Waiting for caches to sync for OpenShiftAuthenticatorCertRequester I0428 12:56:56.137322 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorController I0428 12:56:56.137437 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0428 12:56:56.137683 1 base_controller.go:76] Waiting for caches to sync for APIServerStaticResources-StaticResources I0428 12:56:56.137787 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionKey I0428 12:56:56.137853 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionCondition I0428 12:56:56.137882 1 base_controller.go:76] Waiting for caches to sync for openshift-apiserver-APIService I0428 12:56:56.138060 1 base_controller.go:76] Waiting for caches to sync for StatusSyncer_authentication I0428 12:56:56.138147 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionMigration I0428 12:56:56.138221 1 base_controller.go:76] Waiting for caches to sync for auditPolicyController I0428 12:56:56.138291 1 base_controller.go:76] Waiting for caches to sync for NamespaceFinalizerController_openshift-oauth-apiserver I0428 12:56:56.138431 1 base_controller.go:76] Waiting for caches to sync for RevisionController I0428 12:56:56.138488 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionState I0428 12:56:56.138632 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionPrune I0428 12:56:56.138905 1 base_controller.go:76] Waiting for caches to sync for SecretRevisionPruneController I0428 12:56:56.140732 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.141985 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.142031 1 base_controller.go:76] Waiting for caches to sync for ProxyConfigController I0428 12:56:56.142042 1 base_controller.go:76] Waiting for caches to sync for oauth-server I0428 12:56:56.134961 1 base_controller.go:76] Waiting for caches to sync for LoggingSyncer I0428 12:56:56.142177 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.142386 1 base_controller.go:76] Waiting for caches to sync for OpenshiftAuthenticationStaticResources-StaticResources I0428 12:56:56.134971 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0428 12:56:56.145843 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.146198 1 reflector.go:368] Caches populated for *v1.OAuth from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.146311 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.146318 1 reflector.go:368] Caches populated for *v1.Proxy from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.146873 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.150793 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.159134 1 reflector.go:368] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.182676 1 reflector.go:368] Caches populated for *v1.ClusterRoleBinding from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.186823 1 reflector.go:368] Caches populated for *v1.DaemonSet from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.187198 1 reflector.go:368] Caches populated for *v1.Console from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.187290 1 reflector.go:368] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.187309 1 reflector.go:368] Caches populated for *v1.APIServer from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.187578 1 reflector.go:368] Caches populated for *v1.Ingress from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.187589 1 reflector.go:368] Caches populated for *v1.Role from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.187821 1 reflector.go:368] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.187905 1 reflector.go:368] Caches populated for *v1.ClusterVersion from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.187915 1 reflector.go:368] Caches populated for *v1.Infrastructure from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.189340 1 reflector.go:368] Caches populated for operator.openshift.io/v1, Resource=authentications from k8s.io/client-go/dynamic/dynamicinformer/informer.go:108 I0428 12:56:56.216132 1 reflector.go:368] Caches populated for *v1.OAuthClient from github.com/openshift/client-go/oauth/informers/externalversions/factory.go:125 I0428 12:56:56.216493 1 reflector.go:368] Caches populated for *v1.RoleBinding from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.216744 1 reflector.go:368] Caches populated for *v1.Route from github.com/openshift/client-go/route/informers/externalversions/factory.go:125 I0428 12:56:56.216982 1 reflector.go:368] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0428 12:56:56.217023 1 reflector.go:368] Caches populated for *v1.CertificateSigningRequest from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.217331 1 reflector.go:368] Caches populated for *v1alpha1.StorageVersionMigration from sigs.k8s.io/kube-storage-version-migrator/pkg/clients/informer/factory.go:132 I0428 12:56:56.236030 1 base_controller.go:82] Caches are synced for OAuthClientsController I0428 12:56:56.236141 1 base_controller.go:119] Starting #1 worker of OAuthClientsController controller ... I0428 12:56:56.236032 1 base_controller.go:82] Caches are synced for authentication-ManagementState I0428 12:56:56.236166 1 base_controller.go:119] Starting #1 worker of authentication-ManagementState controller ... I0428 12:56:56.237116 1 base_controller.go:82] Caches are synced for openshift-authentication-RemoveStaleConditions I0428 12:56:56.237131 1 base_controller.go:119] Starting #1 worker of openshift-authentication-RemoveStaleConditions controller ... I0428 12:56:56.237532 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0428 12:56:56.237547 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorCertApprover_OpenShiftAuthenticator controller ... I0428 12:56:56.238042 1 base_controller.go:82] Caches are synced for APIServerStaticResources-StaticResources I0428 12:56:56.238079 1 base_controller.go:119] Starting #1 worker of APIServerStaticResources-StaticResources controller ... I0428 12:56:56.238270 1 base_controller.go:82] Caches are synced for auditPolicyController I0428 12:56:56.238283 1 base_controller.go:119] Starting #1 worker of auditPolicyController controller ... I0428 12:56:56.238670 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'FastControllerResync' Controller "auditPolicyController" resync interval is set to 10s which might lead to client request throttling I0428 12:56:56.241158 1 base_controller.go:82] Caches are synced for openshift-authentication-UnsupportedConfigOverrides I0428 12:56:56.241170 1 base_controller.go:119] Starting #1 worker of openshift-authentication-UnsupportedConfigOverrides controller ... I0428 12:56:56.242231 1 base_controller.go:82] Caches are synced for LoggingSyncer I0428 12:56:56.242242 1 base_controller.go:119] Starting #1 worker of LoggingSyncer controller ... I0428 12:56:56.271162 1 reflector.go:368] Caches populated for *v1.ClusterOperator from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.286079 1 reflector.go:368] Caches populated for *v1.IngressController from github.com/openshift/client-go/operator/informers/externalversions/factory.go:125 I0428 12:56:56.303658 1 reflector.go:368] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.338345 1 base_controller.go:82] Caches are synced for StatusSyncer_authentication I0428 12:56:56.338363 1 base_controller.go:119] Starting #1 worker of StatusSyncer_authentication controller ... I0428 12:56:56.338380 1 base_controller.go:82] Caches are synced for NamespaceFinalizerController_openshift-oauth-apiserver I0428 12:56:56.338385 1 base_controller.go:119] Starting #1 worker of NamespaceFinalizerController_openshift-oauth-apiserver controller ... I0428 12:56:56.464843 1 reflector.go:368] Caches populated for *v1.Authentication from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0428 12:56:56.504384 1 reflector.go:368] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.703299 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:56:56.903014 1 reflector.go:368] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0428 12:56:57.103340 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:57.136301 1 base_controller.go:82] Caches are synced for OAuthAPIServerController-WorkloadWorkloadController I0428 12:56:57.136322 1 base_controller.go:119] Starting #1 worker of OAuthAPIServerController-WorkloadWorkloadController controller ... I0428 12:56:57.137506 1 base_controller.go:82] Caches are synced for OpenShiftAuthenticatorCertRequester I0428 12:56:57.137523 1 base_controller.go:119] Starting #1 worker of OpenShiftAuthenticatorCertRequester controller ... I0428 12:56:57.138573 1 base_controller.go:82] Caches are synced for RevisionController I0428 12:56:57.138585 1 base_controller.go:119] Starting #1 worker of RevisionController controller ... I0428 12:56:57.139661 1 base_controller.go:82] Caches are synced for SecretRevisionPruneController I0428 12:56:57.139684 1 base_controller.go:119] Starting #1 worker of SecretRevisionPruneController controller ... I0428 12:56:57.300895 1 request.go:700] Waited for 1.162694691s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services?limit=500&resourceVersion=0 I0428 12:56:57.302701 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0428 12:56:57.338351 1 base_controller.go:82] Caches are synced for openshift-apiserver-APIService I0428 12:56:57.338373 1 base_controller.go:119] Starting #1 worker of openshift-apiserver-APIService controller ... I0428 12:56:57.338440 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'FastControllerResync' Controller "openshift-apiserver-APIService" resync interval is set to 10s which might lead to client request throttling I0428 12:56:57.338349 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorController I0428 12:56:57.338477 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorController controller ... I0428 12:56:57.506887 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:57.703617 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:57.902855 1 reflector.go:368] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0428 12:56:57.937373 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressNodesAvailable I0428 12:56:57.937395 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressNodesAvailable controller ... I0428 12:56:58.109734 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:58.143056 1 base_controller.go:82] Caches are synced for openshift-authentication-Metadata I0428 12:56:58.143078 1 base_controller.go:119] Starting #1 worker of openshift-authentication-Metadata controller ... I0428 12:56:58.308729 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:58.501010 1 request.go:700] Waited for 2.361892953s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps?limit=500&resourceVersion=0 I0428 12:56:58.506745 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:58.702939 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:56:58.905772 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:58.937342 1 base_controller.go:82] Caches are synced for ConfigObserver I0428 12:56:58.937391 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0428 12:56:59.104020 1 reflector.go:368] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0428 12:56:59.302638 1 reflector.go:368] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0428 12:56:59.501527 1 request.go:700] Waited for 3.359704348s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/services?limit=500&resourceVersion=0 I0428 12:56:59.503316 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0428 12:56:59.536814 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointAccessibleController I0428 12:56:59.536834 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointAccessibleController controller ... I0428 12:56:59.542819 1 base_controller.go:82] Caches are synced for OpenshiftAuthenticationStaticResources-StaticResources I0428 12:56:59.542842 1 base_controller.go:119] Starting #1 worker of OpenshiftAuthenticationStaticResources-StaticResources controller ... I0428 12:56:59.542819 1 base_controller.go:82] Caches are synced for openshift-authentication-PayloadConfig I0428 12:56:59.542866 1 base_controller.go:119] Starting #1 worker of openshift-authentication-PayloadConfig controller ... I0428 12:56:59.542819 1 base_controller.go:82] Caches are synced for openshift-authentication-ServiceCA I0428 12:56:59.542919 1 base_controller.go:119] Starting #1 worker of openshift-authentication-ServiceCA controller ... I0428 12:56:59.712764 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:56:59.736321 1 base_controller.go:82] Caches are synced for WellKnownReadyController I0428 12:56:59.736344 1 base_controller.go:119] Starting #1 worker of WellKnownReadyController controller ... I0428 12:56:59.737051 1 base_controller.go:82] Caches are synced for OAuthServerRouteEndpointAccessibleController I0428 12:56:59.737121 1 base_controller.go:119] Starting #1 worker of OAuthServerRouteEndpointAccessibleController controller ... I0428 12:56:59.742092 1 base_controller.go:82] Caches are synced for ProxyConfigController I0428 12:56:59.742107 1 base_controller.go:119] Starting #1 worker of ProxyConfigController controller ... I0428 12:56:59.906889 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:56:59.936320 1 base_controller.go:82] Caches are synced for RouterCertsDomainValidationController I0428 12:56:59.936340 1 base_controller.go:119] Starting #1 worker of RouterCertsDomainValidationController controller ... I0428 12:56:59.937492 1 base_controller.go:82] Caches are synced for TrustDistributionController I0428 12:56:59.937504 1 base_controller.go:119] Starting #1 worker of TrustDistributionController controller ... I0428 12:56:59.938566 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionState I0428 12:56:59.938582 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionState controller ... I0428 12:56:59.938588 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionMigration I0428 12:56:59.938593 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionKey I0428 12:56:59.938601 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionKey controller ... I0428 12:56:59.938571 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionCondition I0428 12:56:59.938612 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionCondition controller ... I0428 12:56:59.938596 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionMigration controller ... I0428 12:56:59.940383 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionPrune I0428 12:56:59.940399 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionPrune controller ... I0428 12:57:00.102500 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0428 12:57:00.302770 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0428 12:57:00.337224 1 base_controller.go:82] Caches are synced for CustomRouteController I0428 12:57:00.337245 1 base_controller.go:119] Starting #1 worker of CustomRouteController controller ... I0428 12:57:00.342461 1 base_controller.go:82] Caches are synced for oauth-server I0428 12:57:00.342479 1 base_controller.go:119] Starting #1 worker of oauth-server controller ... I0428 12:57:00.342515 1 base_controller.go:82] Caches are synced for ConfigObserver I0428 12:57:00.342520 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0428 12:57:00.502922 1 reflector.go:368] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0428 12:57:00.536117 1 base_controller.go:82] Caches are synced for OAuthServer-WorkloadWorkloadController I0428 12:57:00.536148 1 base_controller.go:119] Starting #1 worker of OAuthServer-WorkloadWorkloadController controller ... I0428 12:57:00.700940 1 request.go:700] Waited for 4.558393709s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints?limit=500&resourceVersion=0 I0428 12:57:00.702697 1 reflector.go:368] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0428 12:57:00.737231 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressState I0428 12:57:00.737255 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressState controller ... I0428 12:57:00.737254 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointsEndpointAccessibleController I0428 12:57:00.737267 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointsEndpointAccessibleController controller ... I0428 12:57:01.901081 1 request.go:700] Waited for 4.763080574s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0428 12:57:03.100981 1 request.go:700] Waited for 3.557614355s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0428 12:57:04.301337 1 request.go:700] Waited for 2.59729769s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/openshift-authenticator-certs I0428 12:57:05.501502 1 request.go:700] Waited for 1.595429125s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-6f878ff6b-s6v7s I0428 12:57:06.701290 1 request.go:700] Waited for 1.195409958s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-6f878ff6b-mdclr I0428 12:57:57.494279 1 apps.go:155] Deployment "openshift-authentication/oauth-openshift" changes: {"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"xMJusDlBI8v5hYOV657AA8kFLaUM7tX4ENOi9VScPNYRHyLFw6AKv4bYSBHh-_7iKv5gTZXOgwIY2D-VNFLExw","operator.openshift.io/spec-hash":"8016cf56b55612fe529b947b166bcd7f2a0d20d3164cfb7a34b14961383946ac"}},"spec":{"progressDeadlineSeconds":null,"revisionHistoryLimit":null,"template":{"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"xMJusDlBI8v5hYOV657AA8kFLaUM7tX4ENOi9VScPNYRHyLFw6AKv4bYSBHh-_7iKv5gTZXOgwIY2D-VNFLExw"}},"spec":{"containers":[{"args":["if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n"],"command":["/bin/bash","-ec"],"image":"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4","lifecycle":{"preStop":{"exec":{"command":["sleep","25"]}}},"livenessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"initialDelaySeconds":30,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"name":"oauth-openshift","ports":[{"containerPort":6443,"name":"https","protocol":"TCP"}],"readinessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"resources":{"requests":{"cpu":"10m","memory":"50Mi"}},"securityContext":{"privileged":true,"readOnlyRootFilesystem":false,"runAsUser":0},"terminationMessagePolicy":"FallbackToLogsOnError","volumeMounts":[{"mountPath":"/var/run/configmaps/audit","name":"audit-policies"},{"mountPath":"/var/log/oauth-server","name":"audit-dir"},{"mountPath":"/var/config/system/secrets/v4-0-config-system-session","name":"v4-0-config-system-session","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-cliconfig","name":"v4-0-config-system-cliconfig","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-serving-cert","name":"v4-0-config-system-serving-cert","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-service-ca","name":"v4-0-config-system-service-ca","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-router-certs","name":"v4-0-config-system-router-certs","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-ocp-branding-template","name":"v4-0-config-system-ocp-branding-template","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-login","name":"v4-0-config-user-template-login","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-provider-selection","name":"v4-0-config-user-template-provider-selection","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-error","name":"v4-0-config-user-template-error","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle","name":"v4-0-config-system-trusted-ca-bundle","readOnly":true}]}],"dnsPolicy":null,"restartPolicy":null,"schedulerName":null,"securityContext":null,"serviceAccount":null,"volumes":[{"configMap":{"name":"audit"},"name":"audit-policies"},{"hostPath":{"path":"/var/log/oauth-server"},"name":"audit-dir"},{"name":"v4-0-config-system-session","secret":{"secretName":"v4-0-config-system-session"}},{"configMap":{"name":"v4-0-config-system-cliconfig"},"name":"v4-0-config-system-cliconfig"},{"name":"v4-0-config-system-serving-cert","secret":{"secretName":"v4-0-config-system-serving-cert"}},{"configMap":{"name":"v4-0-config-system-service-ca"},"name":"v4-0-config-system-service-ca"},{"name":"v4-0-config-system-router-certs","secret":{"secretName":"v4-0-config-system-router-certs"}},{"name":"v4-0-config-system-ocp-branding-template","secret":{"secretName":"v4-0-config-system-ocp-branding-template"}},{"name":"v4-0-config-user-template-login","secret":{"optional":true,"secretName":"v4-0-config-user-template-login"}},{"name":"v4-0-config-user-template-provider-selection","secret":{"optional":true,"secretName":"v4-0-config-user-template-provider-selection"}},{"name":"v4-0-config-user-template-error","secret":{"optional":true,"secretName":"v4-0-config-user-template-error"}},{"configMap":{"name":"v4-0-config-system-trusted-ca-bundle","optional":true},"name":"v4-0-config-system-trusted-ca-bundle"}]}}}} W0428 12:57:57.509014 1 warnings.go:70] spec.template.spec.nodeSelector[node-role.kubernetes.io/master]: use "node-role.kubernetes.io/control-plane" instead W0428 12:57:57.512651 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:57:57.516108 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 12:57:57.516122 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:57:57.516126 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:57:57.516618 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentUpdated' Updated Deployment.apps/oauth-openshift -n openshift-authentication because it changed I0428 12:57:57.578944 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 3, desired generation is 4.","reason":"OAuthServerDeployment_NewGeneration","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:57:57.687806 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing changed from False to True ("OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 3, desired generation is 4.") I0428 12:57:58.870396 1 request.go:700] Waited for 1.086833526s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift I0428 12:58:02.879691 1 apps.go:155] Deployment "openshift-authentication/oauth-openshift" changes: {"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"vfXaN_TkbBfXLEEgfXDvgWM_8jk7PJi0DYhS3npdI7jDLSJwuZoD0qazaJ9FUkAUf4tEbkLwUKNr4yw9h6-xJQ","operator.openshift.io/spec-hash":"6779c18a0ab2384aa57a6f8ee2ef9f279d3a036d823de581d9b30f8f408807da"}},"spec":{"progressDeadlineSeconds":null,"revisionHistoryLimit":null,"template":{"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"vfXaN_TkbBfXLEEgfXDvgWM_8jk7PJi0DYhS3npdI7jDLSJwuZoD0qazaJ9FUkAUf4tEbkLwUKNr4yw9h6-xJQ"}},"spec":{"containers":[{"args":["if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n"],"command":["/bin/bash","-ec"],"image":"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4","lifecycle":{"preStop":{"exec":{"command":["sleep","25"]}}},"livenessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"initialDelaySeconds":30,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"name":"oauth-openshift","ports":[{"containerPort":6443,"name":"https","protocol":"TCP"}],"readinessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"resources":{"requests":{"cpu":"10m","memory":"50Mi"}},"securityContext":{"privileged":true,"readOnlyRootFilesystem":false,"runAsUser":0},"terminationMessagePolicy":"FallbackToLogsOnError","volumeMounts":[{"mountPath":"/var/run/configmaps/audit","name":"audit-policies"},{"mountPath":"/var/log/oauth-server","name":"audit-dir"},{"mountPath":"/var/config/system/secrets/v4-0-config-system-session","name":"v4-0-config-system-session","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-cliconfig","name":"v4-0-config-system-cliconfig","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-serving-cert","name":"v4-0-config-system-serving-cert","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-service-ca","name":"v4-0-config-system-service-ca","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-router-certs","name":"v4-0-config-system-router-certs","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-ocp-branding-template","name":"v4-0-config-system-ocp-branding-template","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-login","name":"v4-0-config-user-template-login","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-provider-selection","name":"v4-0-config-user-template-provider-selection","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-error","name":"v4-0-config-user-template-error","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle","name":"v4-0-config-system-trusted-ca-bundle","readOnly":true}]}],"dnsPolicy":null,"restartPolicy":null,"schedulerName":null,"securityContext":null,"serviceAccount":null,"volumes":[{"configMap":{"name":"audit"},"name":"audit-policies"},{"hostPath":{"path":"/var/log/oauth-server"},"name":"audit-dir"},{"name":"v4-0-config-system-session","secret":{"secretName":"v4-0-config-system-session"}},{"configMap":{"name":"v4-0-config-system-cliconfig"},"name":"v4-0-config-system-cliconfig"},{"name":"v4-0-config-system-serving-cert","secret":{"secretName":"v4-0-config-system-serving-cert"}},{"configMap":{"name":"v4-0-config-system-service-ca"},"name":"v4-0-config-system-service-ca"},{"name":"v4-0-config-system-router-certs","secret":{"secretName":"v4-0-config-system-router-certs"}},{"name":"v4-0-config-system-ocp-branding-template","secret":{"secretName":"v4-0-config-system-ocp-branding-template"}},{"name":"v4-0-config-user-template-login","secret":{"optional":true,"secretName":"v4-0-config-user-template-login"}},{"name":"v4-0-config-user-template-provider-selection","secret":{"optional":true,"secretName":"v4-0-config-user-template-provider-selection"}},{"name":"v4-0-config-user-template-error","secret":{"optional":true,"secretName":"v4-0-config-user-template-error"}},{"configMap":{"name":"v4-0-config-system-trusted-ca-bundle","optional":true},"name":"v4-0-config-system-trusted-ca-bundle"}]}}}} W0428 12:58:02.889682 1 warnings.go:70] spec.template.spec.nodeSelector[node-role.kubernetes.io/master]: use "node-role.kubernetes.io/control-plane" instead I0428 12:58:02.889911 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentUpdated' Updated Deployment.apps/oauth-openshift -n openshift-authentication because it changed W0428 12:58:02.891428 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:58:02.891440 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 12:58:02.891472 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:58:02.891477 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:58:02.939860 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 4, desired generation is 5.","reason":"OAuthServerDeployment_NewGeneration","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:58:02.965292 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 3, desired generation is 4." to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 4, desired generation is 5." I0428 12:58:04.071027 1 request.go:700] Waited for 1.138486879s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0428 12:58:05.271095 1 request.go:700] Waited for 1.786312665s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0428 12:58:06.271509 1 request.go:700] Waited for 1.192020278s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs I0428 12:58:07.272036 1 request.go:700] Waited for 1.594682009s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0428 12:58:08.273772 1 request.go:700] Waited for 1.595788622s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle W0428 12:58:08.491557 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:58:08.491575 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 12:58:08.493048 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:58:08.493109 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:58:08.538780 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 1/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:58:08.561073 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 4, desired generation is 5." to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 1/3 pods have been updated to the latest generation and 2/3 pods are available" I0428 12:58:09.670863 1 request.go:700] Waited for 1.127314791s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit I0428 12:58:10.670981 1 request.go:700] Waited for 1.589685669s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api I0428 12:58:11.871305 1 request.go:700] Waited for 1.197513268s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/serviceaccounts/oauth-apiserver-sa W0428 12:58:33.417245 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:58:33.417274 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 12:58:33.417280 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:58:33.417285 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:58:33.605732 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:58:33.718740 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 1/3 pods have been updated to the latest generation and 2/3 pods are available" to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available" I0428 12:58:34.726495 1 request.go:700] Waited for 1.00770202s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events I0428 12:58:35.926510 1 request.go:700] Waited for 1.797461833s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0428 12:58:37.127561 1 request.go:700] Waited for 1.19580296s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0428 12:58:38.326603 1 request.go:700] Waited for 1.384734801s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-77559ddc46-d5p7c W0428 12:58:39.045177 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:58:39.045255 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0428 12:58:39.045275 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:58:39.045292 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:58:39.136233 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-858c988757-vq2ph pod)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:58:39.164310 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-858c988757-vq2ph pod)" I0428 12:58:40.326557 1 request.go:700] Waited for 1.196698436s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0428 12:58:41.526293 1 request.go:700] Waited for 1.996735974s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0428 12:58:42.726995 1 request.go:700] Waited for 1.645183197s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0428 12:58:43.925920 1 request.go:700] Waited for 1.770097361s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle W0428 12:58:43.943351 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0428 12:58:43.943429 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0428 12:58:43.943469 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0428 12:58:43.943489 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0428 12:58:43.943507 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0428 12:58:44.020808 1 status_controller.go:225] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-28T12:57:57Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-28T12:10:54Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-28T11:49:04Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-28T11:49:04Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0428 12:58:44.040332 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-858c988757-vq2ph pod)" to "All is well" I0428 12:58:44.937183 1 request.go:700] Waited for 1.800348351s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0428 12:58:46.127634 1 request.go:700] Waited for 1.962039088s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0428 12:58:47.136268 1 request.go:700] Waited for 1.797485421s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/etcd-serving-ca I0428 12:58:48.326533 1 request.go:700] Waited for 1.365309772s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0428 12:59:28.685602 1 observer_polling.go:120] Observed file "/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt" has been modified (old="00411c197b16f659945fba3c2f970a26030f56eef5d445c913cb59a089c813b9", new="1b8346d10e3feeef06b9dc10333fd5c38c9f5be0ec04750cba318caeb2cfe015") I0428 12:59:28.685849 1 cmd.go:173] exiting because "/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt" changed I0428 12:59:28.685930 1 genericapiserver.go:691] "[graceful-termination] pre-shutdown hooks completed" name="PreShutdownHooksStopped" I0428 12:59:28.687002 1 genericapiserver.go:546] "[graceful-termination] shutdown event" name="ShutdownInitiated" I0428 12:59:28.687068 1 genericapiserver.go:549] "[graceful-termination] shutdown event" name="AfterShutdownDelayDuration" I0428 12:59:28.687103 1 genericapiserver.go:615] "[graceful-termination] shutdown event" name="NotAcceptingNewRequest" I0428 12:59:28.687442 1 genericapiserver.go:640] [graceful-termination] in-flight non long-running request(s) have drained I0428 12:59:28.687503 1 genericapiserver.go:649] "[graceful-termination] not going to wait for active watch request(s) to drain" I0428 12:59:28.687543 1 genericapiserver.go:681] "[graceful-termination] shutdown event" name="InFlightRequestsDrained" I0428 12:59:28.687574 1 object_count_tracker.go:151] "StorageObjectCountTracker pruner is exiting" I0428 12:59:28.687639 1 secure_serving.go:258] Stopped listening on [::]:8443 I0428 12:59:28.687666 1 genericapiserver.go:598] "[graceful-termination] shutdown event" name="HTTPServerStoppedListening" I0428 12:59:28.687700 1 tlsconfig.go:258] "Shutting down DynamicServingCertificateController" I0428 12:59:28.688600 1 configmap_cafile_content.go:226] "Shutting down controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0428 12:59:28.688666 1 configmap_cafile_content.go:226] "Shutting down controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0428 12:59:28.688694 1 requestheader_controller.go:186] Shutting down RequestHeaderAuthRequestController I0428 12:59:28.689030 1 dynamic_serving_content.go:149] "Shutting down controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0428 12:59:28.689776 1 genericapiserver.go:711] [graceful-termination] apiserver is exiting I0428 12:59:28.689823 1 builder.go:335] server exited I0428 12:59:28.690384 1 base_controller.go:181] Shutting down OAuthClientsController ... I0428 12:59:28.690611 1 base_controller.go:181] Shutting down OAuthServerServiceEndpointsEndpointAccessibleController ... I0428 12:59:28.690651 1 base_controller.go:181] Shutting down openshift-authentication-IngressState ... I0428 12:59:28.690673 1 base_controller.go:181] Shutting down OAuthServer-WorkloadWorkloadController ... I0428 12:59:28.690693 1 base_controller.go:181] Shutting down ConfigObserver ... I0428 12:59:28.690724 1 base_controller.go:181] Shutting down oauth-server ... I0428 12:59:28.690741 1 base_controller.go:181] Shutting down CustomRouteController ... I0428 12:59:28.690763 1 base_controller.go:181] Shutting down openshift-oauth-apiserver-EncryptionPrune ... I0428 12:59:28.690791 1 base_controller.go:181] Shutting down openshift-oauth-apiserver-EncryptionMigration ... I0428 12:59:28.690814 1 base_controller.go:181] Shutting down openshift-oauth-apiserver-EncryptionCondition ... I0428 12:59:28.690833 1 base_controller.go:181] Shutting down openshift-oauth-apiserver-EncryptionKey ... I0428 12:59:28.690851 1 base_controller.go:181] Shutting down openshift-oauth-apiserver-EncryptionState ... I0428 12:59:28.690870 1 base_controller.go:181] Shutting down TrustDistributionController ... I0428 12:59:28.690902 1 base_controller.go:181] Shutting down RouterCertsDomainValidationController ... I0428 12:59:28.690923 1 base_controller.go:181] Shutting down ProxyConfigController ... I0428 12:59:28.690940 1 base_controller.go:181] Shutting down OAuthServerRouteEndpointAccessibleController ... I0428 12:59:28.690958 1 base_controller.go:181] Shutting down WellKnownReadyController ... I0428 12:59:28.690989 1 base_controller.go:181] Shutting down openshift-authentication-ServiceCA ... I0428 12:59:28.691007 1 base_controller.go:181] Shutting down openshift-authentication-PayloadConfig ... I0428 12:59:28.691024 1 base_controller.go:181] Shutting down OpenshiftAuthenticationStaticResources-StaticResources ... I0428 12:59:28.691041 1 base_controller.go:181] Shutting down OAuthServerServiceEndpointAccessibleController ... I0428 12:59:28.691078 1 base_controller.go:181] Shutting down ConfigObserver ... I0428 12:59:28.691102 1 base_controller.go:181] Shutting down openshift-authentication-Metadata ... I0428 12:59:28.691121 1 base_controller.go:181] Shutting down openshift-authentication-IngressNodesAvailable ... I0428 12:59:28.691157 1 base_controller.go:181] Shutting down WebhookAuthenticatorController ... I0428 12:59:28.691175 1 base_controller.go:181] Shutting down openshift-apiserver-APIService ... I0428 12:59:28.691194 1 base_controller.go:181] Shutting down SecretRevisionPruneController ... I0428 12:59:28.691219 1 base_controller.go:181] Shutting down RevisionController ... I0428 12:59:28.691244 1 base_controller.go:181] Shutting down OpenShiftAuthenticatorCertRequester ... I0428 12:59:28.691263 1 base_controller.go:181] Shutting down OAuthAPIServerController-WorkloadWorkloadController ... I0428 12:59:28.691295 1 base_controller.go:181] Shutting down NamespaceFinalizerController_openshift-oauth-apiserver ... I0428 12:59:28.691330 1 base_controller.go:181] Shutting down StatusSyncer_authentication ... I0428 12:59:28.691345 1 base_controller.go:159] All StatusSyncer_authentication post start hooks have been terminated I0428 12:59:28.691368 1 base_controller.go:181] Shutting down LoggingSyncer ... I0428 12:59:28.691397 1 base_controller.go:181] Shutting down openshift-authentication-UnsupportedConfigOverrides ... I0428 12:59:28.691418 1 base_controller.go:181] Shutting down auditPolicyController ... I0428 12:59:28.691436 1 base_controller.go:181] Shutting down APIServerStaticResources-StaticResources ... I0428 12:59:28.691476 1 base_controller.go:181] Shutting down WebhookAuthenticatorCertApprover_OpenShiftAuthenticator ... I0428 12:59:28.691501 1 base_controller.go:181] Shutting down openshift-authentication-RemoveStaleConditions ... I0428 12:59:28.691519 1 base_controller.go:181] Shutting down authentication-ManagementState ... I0428 12:59:28.691548 1 base_controller.go:123] Shutting down worker of OAuthClientsController controller ... I0428 12:59:28.691571 1 base_controller.go:113] All OAuthClientsController workers have been terminated I0428 12:59:28.691641 1 base_controller.go:123] Shutting down worker of OAuthServerServiceEndpointsEndpointAccessibleController controller ... I0428 12:59:28.691662 1 base_controller.go:113] All OAuthServerServiceEndpointsEndpointAccessibleController workers have been terminated I0428 12:59:28.691678 1 base_controller.go:123] Shutting down worker of openshift-authentication-IngressState controller ... I0428 12:59:28.691695 1 base_controller.go:113] All openshift-authentication-IngressState workers have been terminated I0428 12:59:28.691713 1 base_controller.go:123] Shutting down worker of OAuthServer-WorkloadWorkloadController controller ... I0428 12:59:28.691743 1 base_controller.go:113] All OAuthServer-WorkloadWorkloadController workers have been terminated I0428 12:59:28.691760 1 base_controller.go:123] Shutting down worker of ConfigObserver controller ... I0428 12:59:28.691775 1 base_controller.go:113] All ConfigObserver workers have been terminated I0428 12:59:28.691791 1 base_controller.go:123] Shutting down worker of oauth-server controller ... I0428 12:59:28.691814 1 base_controller.go:113] All oauth-server workers have been terminated I0428 12:59:28.691836 1 base_controller.go:123] Shutting down worker of CustomRouteController controller ... I0428 12:59:28.691850 1 base_controller.go:113] All CustomRouteController workers have been terminated I0428 12:59:28.691866 1 base_controller.go:123] Shutting down worker of openshift-oauth-apiserver-EncryptionPrune controller ... I0428 12:59:28.691881 1 base_controller.go:113] All openshift-oauth-apiserver-EncryptionPrune workers have been terminated I0428 12:59:28.691905 1 base_controller.go:123] Shutting down worker of openshift-oauth-apiserver-EncryptionMigration controller ... I0428 12:59:28.691927 1 base_controller.go:113] All openshift-oauth-apiserver-EncryptionMigration workers have been terminated I0428 12:59:28.691945 1 base_controller.go:123] Shutting down worker of openshift-oauth-apiserver-EncryptionCondition controller ... I0428 12:59:28.691961 1 base_controller.go:113] All openshift-oauth-apiserver-EncryptionCondition workers have been terminated I0428 12:59:28.691978 1 base_controller.go:123] Shutting down worker of openshift-oauth-apiserver-EncryptionKey controller ... I0428 12:59:28.692006 1 base_controller.go:113] All openshift-oauth-apiserver-EncryptionKey workers have been terminated I0428 12:59:28.692023 1 base_controller.go:123] Shutting down worker of openshift-oauth-apiserver-EncryptionState controller ... I0428 12:59:28.692039 1 base_controller.go:113] All openshift-oauth-apiserver-EncryptionState workers have been terminated I0428 12:59:28.692057 1 base_controller.go:123] Shutting down worker of TrustDistributionController controller ... I0428 12:59:28.692084 1 base_controller.go:113] All TrustDistributionController workers have been terminated I0428 12:59:28.692101 1 base_controller.go:123] Shutting down worker of RouterCertsDomainValidationController controller ... I0428 12:59:28.692116 1 base_controller.go:113] All RouterCertsDomainValidationController workers have been terminated I0428 12:59:28.692132 1 base_controller.go:123] Shutting down worker of ProxyConfigController controller ... I0428 12:59:28.692154 1 base_controller.go:113] All ProxyConfigController workers have been terminated I0428 12:59:28.692176 1 base_controller.go:123] Shutting down worker of WellKnownReadyController controller ... I0428 12:59:28.692196 1 base_controller.go:113] All WellKnownReadyController workers have been terminated I0428 12:59:28.692213 1 base_controller.go:123] Shutting down worker of openshift-authentication-ServiceCA controller ... I0428 12:59:28.692228 1 base_controller.go:113] All openshift-authentication-ServiceCA workers have been terminated I0428 12:59:28.692255 1 base_controller.go:123] Shutting down worker of openshift-authentication-PayloadConfig controller ... I0428 12:59:28.692271 1 base_controller.go:113] All openshift-authentication-PayloadConfig workers have been terminated I0428 12:59:28.692288 1 base_controller.go:123] Shutting down worker of OpenshiftAuthenticationStaticResources-StaticResources controller ... I0428 12:59:28.692304 1 base_controller.go:113] All OpenshiftAuthenticationStaticResources-StaticResources workers have been terminated I0428 12:59:28.692332 1 base_controller.go:123] Shutting down worker of OAuthServerServiceEndpointAccessibleController controller ... I0428 12:59:28.692349 1 base_controller.go:113] All OAuthServerServiceEndpointAccessibleController workers have been terminated I0428 12:59:28.692365 1 base_controller.go:123] Shutting down worker of ConfigObserver controller ... I0428 12:59:28.692380 1 base_controller.go:113] All ConfigObserver workers have been terminated I0428 12:59:28.692405 1 base_controller.go:123] Shutting down worker of openshift-authentication-Metadata controller ... I0428 12:59:28.692423 1 base_controller.go:113] All openshift-authentication-Metadata workers have been terminated I0428 12:59:28.692439 1 base_controller.go:123] Shutting down worker of openshift-authentication-IngressNodesAvailable controller ... I0428 12:59:28.692574 1 base_controller.go:113] All openshift-authentication-IngressNodesAvailable workers have been terminated I0428 12:59:28.692603 1 base_controller.go:123] Shutting down worker of WebhookAuthenticatorController controller ... I0428 12:59:28.692623 1 base_controller.go:113] All WebhookAuthenticatorController workers have been terminated I0428 12:59:28.692639 1 base_controller.go:123] Shutting down worker of openshift-apiserver-APIService controller ... I0428 12:59:28.692655 1 base_controller.go:113] All openshift-apiserver-APIService workers have been terminated I0428 12:59:28.692672 1 base_controller.go:123] Shutting down worker of SecretRevisionPruneController controller ... I0428 12:59:28.692695 1 base_controller.go:113] All SecretRevisionPruneController workers have been terminated I0428 12:59:28.692717 1 base_controller.go:123] Shutting down worker of RevisionController controller ... I0428 12:59:28.692733 1 base_controller.go:113] All RevisionController workers have been terminated I0428 12:59:28.692750 1 base_controller.go:123] Shutting down worker of OpenShiftAuthenticatorCertRequester controller ... I0428 12:59:28.692765 1 base_controller.go:113] All OpenShiftAuthenticatorCertRequester workers have been terminated I0428 12:59:28.692797 1 base_controller.go:123] Shutting down worker of OAuthAPIServerController-WorkloadWorkloadController controller ... I0428 12:59:28.692814 1 base_controller.go:113] All OAuthAPIServerController-WorkloadWorkloadController workers have been terminated I0428 12:59:28.692831 1 base_controller.go:123] Shutting down worker of NamespaceFinalizerController_openshift-oauth-apiserver controller ... I0428 12:59:28.692847 1 base_controller.go:113] All NamespaceFinalizerController_openshift-oauth-apiserver workers have been terminated I0428 12:59:28.692876 1 base_controller.go:123] Shutting down worker of StatusSyncer_authentication controller ... I0428 12:59:28.692892 1 base_controller.go:113] All StatusSyncer_authentication workers have been terminated I0428 12:59:28.692910 1 base_controller.go:123] Shutting down worker of LoggingSyncer controller ... I0428 12:59:28.692924 1 base_controller.go:113] All LoggingSyncer workers have been terminated I0428 12:59:28.692946 1 base_controller.go:123] Shutting down worker of openshift-authentication-UnsupportedConfigOverrides controller ... I0428 12:59:28.692967 1 base_controller.go:113] All openshift-authentication-UnsupportedConfigOverrides workers have been terminated I0428 12:59:28.692985 1 base_controller.go:123] Shutting down worker of auditPolicyController controller ... I0428 12:59:28.693001 1 base_controller.go:113] All auditPolicyController workers have been terminated I0428 12:59:28.693017 1 base_controller.go:123] Shutting down worker of APIServerStaticResources-StaticResources controller ... I0428 12:59:28.693043 1 base_controller.go:113] All APIServerStaticResources-StaticResources workers have been terminated I0428 12:59:28.693060 1 base_controller.go:123] Shutting down worker of WebhookAuthenticatorCertApprover_OpenShiftAuthenticator controller ... I0428 12:59:28.693076 1 base_controller.go:113] All WebhookAuthenticatorCertApprover_OpenShiftAuthenticator workers have been terminated I0428 12:59:28.693093 1 base_controller.go:123] Shutting down worker of openshift-authentication-RemoveStaleConditions controller ... I0428 12:59:28.693115 1 base_controller.go:113] All openshift-authentication-RemoveStaleConditions workers have been terminated I0428 12:59:28.693136 1 base_controller.go:123] Shutting down worker of authentication-ManagementState controller ... I0428 12:59:28.693153 1 base_controller.go:113] All authentication-ManagementState workers have been terminated I0428 12:59:28.697088 1 base_controller.go:123] Shutting down worker of OAuthServerRouteEndpointAccessibleController controller ... I0428 12:59:28.697147 1 base_controller.go:113] All OAuthServerRouteEndpointAccessibleController workers have been terminated W0428 12:59:28.705679 1 leaderelection.go:84] leader election lost