W0702 02:12:17.834460 1 cmd.go:257] Using insecure, self-signed certificates I0702 02:12:17.834755 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782958337 cert, and key in /tmp/serving-cert-738119652/serving-signer.crt, /tmp/serving-cert-738119652/serving-signer.key I0702 02:12:18.100613 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0702 02:12:18.100946 1 observer_polling.go:159] Starting file observer I0702 02:12:18.101300 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0702 02:12:18.101313 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0702 02:12:18.126152 1 builder.go:304] service-ca-controller version v4.18.0-202504090803.p0.g30efb52.assembly.stream.el9-0-gf72aef6- I0702 02:12:18.126783 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-738119652/tls.crt::/tmp/serving-cert-738119652/tls.key" I0702 02:12:18.513034 1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController I0702 02:12:18.520916 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0702 02:12:18.520935 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0702 02:12:18.520954 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0702 02:12:18.520959 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0702 02:12:18.524674 1 secure_serving.go:57] Forcing use of http/1.1 only W0702 02:12:18.524697 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0702 02:12:18.524703 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. I0702 02:12:18.524706 1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0702 02:12:18.524709 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0702 02:12:18.524721 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0702 02:12:18.524726 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0702 02:12:18.524730 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0702 02:12:18.528933 1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController I0702 02:12:18.528959 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0702 02:12:18.528953 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0702 02:12:18.528974 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 02:12:18.528977 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0702 02:12:18.529008 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 02:12:18.529243 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-738119652/tls.crt::/tmp/serving-cert-738119652/tls.key" I0702 02:12:18.529332 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-738119652/tls.crt::/tmp/serving-cert-738119652/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958337\" (2026-07-02 02:12:17 +0000 UTC to 2026-08-01 02:12:18 +0000 UTC (now=2026-07-02 02:12:18.529302324 +0000 UTC))" I0702 02:12:18.529507 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958338\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958338\" (2026-07-02 01:12:18 +0000 UTC to 2027-07-02 01:12:18 +0000 UTC (now=2026-07-02 02:12:18.529479157 +0000 UTC))" I0702 02:12:18.529550 1 leaderelection.go:254] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0702 02:12:18.529561 1 secure_serving.go:213] Serving securely on [::]:8443 I0702 02:12:18.529585 1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated I0702 02:12:18.529602 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0702 02:12:18.532918 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0702 02:12:18.533977 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0702 02:12:18.534008 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175 I0702 02:12:18.540827 1 leaderelection.go:268] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0702 02:12:18.540888 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"ec59b4b9-d929-4901-a307-d8beb61eb35c", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11534", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-6549cb95df-tntwz_03f4bb30-7e44-4f9c-986a-7f8e807dca99 became leader I0702 02:12:18.541772 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0702 02:12:18.541816 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0702 02:12:18.541774 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0702 02:12:18.541811 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0702 02:12:18.541872 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0702 02:12:18.541935 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0702 02:12:18.542334 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0702 02:12:18.542381 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0702 02:12:18.548792 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0702 02:12:18.560144 1 reflector.go:368] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0702 02:12:18.560446 1 reflector.go:368] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0702 02:12:18.560486 1 reflector.go:368] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0702 02:12:18.594965 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0702 02:12:18.629030 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 02:12:18.629047 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0702 02:12:18.629053 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 02:12:18.629282 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 01:55:44 +0000 UTC to 2036-06-29 01:55:44 +0000 UTC (now=2026-07-02 02:12:18.62924883 +0000 UTC))" I0702 02:12:18.629455 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-738119652/tls.crt::/tmp/serving-cert-738119652/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958337\" (2026-07-02 02:12:17 +0000 UTC to 2026-08-01 02:12:18 +0000 UTC (now=2026-07-02 02:12:18.629440863 +0000 UTC))" I0702 02:12:18.629599 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958338\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958338\" (2026-07-02 01:12:18 +0000 UTC to 2027-07-02 01:12:18 +0000 UTC (now=2026-07-02 02:12:18.629561224 +0000 UTC))" I0702 02:12:18.629723 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-02 01:55:45 +0000 UTC to 2036-06-29 01:55:45 +0000 UTC (now=2026-07-02 02:12:18.62970978 +0000 UTC))" I0702 02:12:18.629758 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-02 01:55:46 +0000 UTC to 2036-06-29 01:55:46 +0000 UTC (now=2026-07-02 02:12:18.629735357 +0000 UTC))" I0702 02:12:18.629776 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-02 01:55:46 +0000 UTC to 2036-06-29 01:55:46 +0000 UTC (now=2026-07-02 02:12:18.629766656 +0000 UTC))" I0702 02:12:18.629792 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-02 01:55:46 +0000 UTC to 2036-06-29 01:55:46 +0000 UTC (now=2026-07-02 02:12:18.629783567 +0000 UTC))" I0702 02:12:18.629808 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-02 01:55:47 +0000 UTC to 2036-06-29 01:55:47 +0000 UTC (now=2026-07-02 02:12:18.629798942 +0000 UTC))" I0702 02:12:18.629824 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9nbgvmgvbn22v764b0rl5o6j84ga27-kx-2921f922c2_customer-system-admin-signer@1782957358\" [] issuer=\"\" (2026-07-02 01:55:57 +0000 UTC to 2026-07-09 01:55:58 +0000 UTC (now=2026-07-02 02:12:18.629814367 +0000 UTC))" I0702 02:12:18.629843 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9nbgvmgvbn22v764b0rl5o6j84ga27-kx-2921f922c2_sre-system-admin-signer@1782957358\" [] issuer=\"\" (2026-07-02 01:55:57 +0000 UTC to 2026-07-09 01:55:58 +0000 UTC (now=2026-07-02 02:12:18.629833242 +0000 UTC))" I0702 02:12:18.629858 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 01:55:44 +0000 UTC to 2036-06-29 01:55:44 +0000 UTC (now=2026-07-02 02:12:18.629850235 +0000 UTC))" I0702 02:12:18.629976 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-738119652/tls.crt::/tmp/serving-cert-738119652/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958337\" (2026-07-02 02:12:17 +0000 UTC to 2026-08-01 02:12:18 +0000 UTC (now=2026-07-02 02:12:18.629966124 +0000 UTC))" I0702 02:12:18.630129 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958338\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958338\" (2026-07-02 01:12:18 +0000 UTC to 2027-07-02 01:12:18 +0000 UTC (now=2026-07-02 02:12:18.630109635 +0000 UTC))" I0702 02:12:18.641889 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0702 02:12:18.641915 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:12:18.641923 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:12:18.641928 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:12:18.641933 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:12:18.641938 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:12:18.641895 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0702 02:12:18.641991 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0702 02:12:18.641979 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0702 02:12:18.642003 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0702 02:12:18.642012 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0702 02:12:18.642018 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0702 02:12:18.642015 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0702 02:12:18.642033 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0702 02:12:18.642042 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0702 02:12:18.642048 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0702 02:12:18.642052 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0702 02:12:18.642055 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0702 02:12:18.642023 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0702 02:12:18.642462 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0702 02:12:18.642489 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0702 02:12:18.642496 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0702 02:12:18.642503 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0702 02:12:18.642507 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0702 02:12:18.642511 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0702 02:12:18.642556 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0702 02:12:18.642569 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0702 02:12:18.642576 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0702 02:12:18.642580 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0702 02:12:18.642585 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0702 02:12:18.642590 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0702 02:12:18.652833 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0702 02:12:18.689320 1 reflector.go:368] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0702 02:12:18.742320 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0702 02:12:18.742346 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0702 02:12:18.742349 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0702 02:12:18.742356 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0702 02:12:18.742358 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0702 02:12:18.742365 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0702 02:12:18.742371 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0702 02:12:18.742372 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0702 02:12:18.742377 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0702 02:12:18.742384 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0702 02:12:18.742389 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0702 02:12:18.742378 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0702 02:12:18.742422 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0702 02:12:18.742424 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle W0702 02:12:18.742423 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0702 02:12:18.742494 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.742623 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.742752 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.742896 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.742328 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0702 02:12:18.743013 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:12:18.743028 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:12:18.743034 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:12:18.743040 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:12:18.743047 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:12:18.755566 1 configmap.go:109] updating configmap open-cluster-management-2r9nbgvmgvbn22v764b0rl5o6j84ga27/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.762038 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.762119 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.762162 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.762072 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.770779 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0702 02:12:18.777631 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.777707 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.778407 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.779231 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:18.951694 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:19.158656 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:19.425177 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:19.551797 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:19.753311 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:19.952451 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:20.152435 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:20.353671 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:20.554235 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:20.755182 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:20.954373 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:21.159666 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:21.352518 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:21.554862 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:21.754554 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:21.953400 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:22.155005 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:22.354157 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:22.553048 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:22.754565 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0702 02:12:22.956805 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0702 02:12:22.957131 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:23.152896 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:23.353563 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:23.555380 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:23.754008 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:23.953306 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0702 02:12:24.155414 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:24.353272 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:24.554141 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:24.754177 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:24.954273 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:25.153132 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:25.353316 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:25.553436 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:25.754860 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0702 02:12:25.954550 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:26.156021 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:26.354630 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:26.554451 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:26.752553 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0702 02:12:26.955380 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:27.156560 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0702 02:12:27.353095 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:27.552717 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:27.752675 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:27.956433 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:28.157763 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:28.354054 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:28.553443 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:28.753283 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:28.952828 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:29.155448 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:29.357733 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:29.553281 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:29.750343 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:29.950903 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:30.157688 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:30.350194 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:30.550418 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:30.752291 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:30.954271 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:31.151335 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:31.352553 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:31.551120 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:31.752615 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:31.952602 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:32.151751 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:32.352524 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:32.550770 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:32.752279 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:32.952091 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:33.150651 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0702 02:12:47.243473 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0702 02:12:47.258207 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0702 02:12:48.021986 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0702 02:12:52.447959 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0702 02:12:52.447977 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0702 02:13:39.414012 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0702 02:14:16.222275 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0702 02:16:18.726843 1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:18.990831 1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.776795 1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.812526 1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.837443 1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.855390 1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.889976 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.916311 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:25.950478 1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:54.173573 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0702 02:17:06.780407 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 02:17:25.631247 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0702 02:17:28.836575 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0702 02:17:28.942565 1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle I0702 02:17:29.048161 1 configmap.go:109] updating configmap open-cluster-management-2r9nbgvmgvbn22v764b0rl5o6j84ga27/config-service-cabundle with the service signing CA bundle I0702 02:17:29.136544 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0702 02:17:29.247336 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0702 02:17:29.362783 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0702 02:17:29.439355 1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle I0702 02:17:29.522913 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0702 02:17:29.551345 1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle I0702 02:17:29.695452 1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle I0702 02:17:29.802545 1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle I0702 02:17:29.879712 1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle I0702 02:17:29.936685 1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle I0702 02:17:30.385020 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0702 02:17:31.139193 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0702 02:24:33.066693 1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle I0702 02:24:33.083734 1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle I0702 02:24:33.108810 1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle I0702 02:24:33.130923 1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle I0702 02:24:35.038482 1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle I0702 02:24:35.177965 1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle I0702 02:24:35.234197 1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle I0702 02:24:35.334338 1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle W0702 02:32:18.690303 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"