Copying system trust bundle I0428 12:59:07.091351 1 dynamic_serving_content.go:113] "Loaded a new cert/key pair" name="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" I0428 12:59:07.091773 1 dynamic_serving_content.go:113] "Loaded a new cert/key pair" name="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" I0428 12:59:07.742513 1 audit.go:340] Using audit backend: ignoreErrors I0428 12:59:07.754954 1 requestheader_controller.go:244] Loaded a new request header values for RequestHeaderAuthRequestController I0428 12:59:07.770648 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0428 12:59:07.770671 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0428 12:59:07.770692 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0428 12:59:07.770698 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0428 12:59:07.776061 1 secure_serving.go:57] Forcing use of http/1.1 only I0428 12:59:07.776147 1 genericapiserver.go:528] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I0428 12:59:07.787377 1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" certDetail="\"oauth-openshift.openshift-authentication.svc\" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:27 +0000 UTC to 2028-04-27 11:49:28 +0000 UTC (now=2026-04-28 12:59:07.787339485 +0000 UTC))" I0428 12:59:07.787687 1 named_certificates.go:53] "Loaded SNI cert" index=1 certName="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" certDetail="\"*.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com\" [serving] validServingFor=[*.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com] issuer=\"ingress-operator@1777376974\" (2026-04-28 11:49:34 +0000 UTC to 2028-04-27 11:49:35 +0000 UTC (now=2026-04-28 12:59:07.787649554 +0000 UTC))" I0428 12:59:07.788270 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777381147\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777381147\" (2026-04-28 11:59:07 +0000 UTC to 2027-04-28 11:59:07 +0000 UTC (now=2026-04-28 12:59:07.788249038 +0000 UTC))" I0428 12:59:07.788333 1 secure_serving.go:213] Serving securely on [::]:6443 I0428 12:59:07.788468 1 genericapiserver.go:681] [graceful-termination] waiting for shutdown to be initiated I0428 12:59:07.793110 1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController I0428 12:59:07.793136 1 shared_informer.go:311] Waiting for caches to sync for RequestHeaderAuthRequestController I0428 12:59:07.793188 1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" I0428 12:59:07.793321 1 dynamic_serving_content.go:132] "Starting controller" name="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" I0428 12:59:07.793386 1 tlsconfig.go:240] "Starting DynamicServingCertificateController" I0428 12:59:07.794332 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0428 12:59:07.794471 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 12:59:07.794510 1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0428 12:59:07.794528 1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 12:59:07.796516 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229 I0428 12:59:07.797105 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229 I0428 12:59:07.797504 1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229 I0428 12:59:07.806572 1 reflector.go:351] Caches populated for *v1.Group from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229 I0428 12:59:07.894163 1 shared_informer.go:318] Caches are synced for RequestHeaderAuthRequestController I0428 12:59:07.895185 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 12:59:07.895233 1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 12:59:07.895379 1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 11:33:39 +0000 UTC to 2026-04-29 11:33:39 +0000 UTC (now=2026-04-28 12:59:07.895357152 +0000 UTC))" I0428 12:59:07.895529 1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" certDetail="\"oauth-openshift.openshift-authentication.svc\" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:27 +0000 UTC to 2028-04-27 11:49:28 +0000 UTC (now=2026-04-28 12:59:07.895516428 +0000 UTC))" I0428 12:59:07.895741 1 named_certificates.go:53] "Loaded SNI cert" index=1 certName="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" certDetail="\"*.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com\" [serving] validServingFor=[*.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com] issuer=\"ingress-operator@1777376974\" (2026-04-28 11:49:34 +0000 UTC to 2028-04-27 11:49:35 +0000 UTC (now=2026-04-28 12:59:07.895721564 +0000 UTC))" I0428 12:59:07.895889 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777381147\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777381147\" (2026-04-28 11:59:07 +0000 UTC to 2027-04-28 11:59:07 +0000 UTC (now=2026-04-28 12:59:07.895874564 +0000 UTC))" I0428 12:59:07.896027 1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 11:33:37 +0000 UTC to 2036-04-25 11:33:37 +0000 UTC (now=2026-04-28 12:59:07.896013474 +0000 UTC))" I0428 12:59:07.896058 1 tlsconfig.go:178] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"\" (2026-04-28 11:33:41 +0000 UTC to 2026-04-29 11:33:41 +0000 UTC (now=2026-04-28 12:59:07.896045049 +0000 UTC))" I0428 12:59:07.896076 1 tlsconfig.go:178] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-28 11:33:41 +0000 UTC to 2027-04-28 11:33:41 +0000 UTC (now=2026-04-28 12:59:07.896069525 +0000 UTC))" I0428 12:59:07.896104 1 tlsconfig.go:178] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-28 11:33:42 +0000 UTC to 2027-04-28 11:33:42 +0000 UTC (now=2026-04-28 12:59:07.896090435 +0000 UTC))" I0428 12:59:07.896133 1 tlsconfig.go:178] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 11:33:38 +0000 UTC to 2036-04-25 11:33:38 +0000 UTC (now=2026-04-28 12:59:07.896124971 +0000 UTC))" I0428 12:59:07.896152 1 tlsconfig.go:178] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777376945\" [] issuer=\"kubelet-signer\" (2026-04-28 11:49:04 +0000 UTC to 2026-04-29 11:33:41 +0000 UTC (now=2026-04-28 12:59:07.896145016 +0000 UTC))" I0428 12:59:07.896188 1 tlsconfig.go:178] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777376944\" [] issuer=\"\" (2026-04-28 11:49:03 +0000 UTC to 2027-04-28 11:49:04 +0000 UTC (now=2026-04-28 12:59:07.896170348 +0000 UTC))" I0428 12:59:07.896217 1 tlsconfig.go:178] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 11:33:39 +0000 UTC to 2026-04-29 11:33:39 +0000 UTC (now=2026-04-28 12:59:07.896206833 +0000 UTC))" I0428 12:59:07.896365 1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" certDetail="\"oauth-openshift.openshift-authentication.svc\" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777376945\" (2026-04-28 11:49:27 +0000 UTC to 2028-04-27 11:49:28 +0000 UTC (now=2026-04-28 12:59:07.8963525 +0000 UTC))" I0428 12:59:07.896540 1 named_certificates.go:53] "Loaded SNI cert" index=1 certName="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" certDetail="\"*.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com\" [serving] validServingFor=[*.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com] issuer=\"ingress-operator@1777376974\" (2026-04-28 11:49:34 +0000 UTC to 2028-04-27 11:49:35 +0000 UTC (now=2026-04-28 12:59:07.896526524 +0000 UTC))" I0428 12:59:07.896697 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777381147\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777381147\" (2026-04-28 11:59:07 +0000 UTC to 2027-04-28 11:59:07 +0000 UTC (now=2026-04-28 12:59:07.896669338 +0000 UTC))" W0428 13:11:01.603454 1 context.go:119] Failed to set annotations["authentication.openshift.io/username"] to "kube:admin" for audit:"97a09504-cff4-4714-9b5c-30c22bb90ce4", it has already been set to "kubeadmin" W0428 13:12:07.634809 1 context.go:119] Failed to set annotations["authentication.openshift.io/username"] to "kube:admin" for audit:"a0d6590a-cc16-4f0c-a63f-18b40dca9479", it has already been set to "kubeadmin"