W0702 02:15:53.614033 1 cmd.go:257] Using insecure, self-signed certificates I0702 02:15:53.614288 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782958553 cert, and key in /tmp/serving-cert-3157121439/serving-signer.crt, /tmp/serving-cert-3157121439/serving-signer.key I0702 02:15:54.218137 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0702 02:15:54.219047 1 observer_polling.go:159] Starting file observer I0702 02:15:54.219763 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0702 02:15:54.219779 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0702 02:15:54.249855 1 builder.go:304] service-ca-controller version v4.18.0-202504090803.p0.g30efb52.assembly.stream.el9-0-gf72aef6- I0702 02:15:54.250436 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3157121439/tls.crt::/tmp/serving-cert-3157121439/tls.key" I0702 02:15:54.695782 1 requestheader_controller.go:247] Loaded a new request header values for RequestHeaderAuthRequestController I0702 02:15:54.702415 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0702 02:15:54.702435 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0702 02:15:54.702455 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0702 02:15:54.702462 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0702 02:15:54.706976 1 secure_serving.go:57] Forcing use of http/1.1 only I0702 02:15:54.706990 1 genericapiserver.go:533] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0702 02:15:54.706999 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0702 02:15:54.707006 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0702 02:15:54.707010 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0702 02:15:54.707013 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0702 02:15:54.707015 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0702 02:15:54.707018 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0702 02:15:54.712720 1 leaderelection.go:254] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0702 02:15:54.713000 1 requestheader_controller.go:172] Starting RequestHeaderAuthRequestController I0702 02:15:54.713018 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0702 02:15:54.713037 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0702 02:15:54.713047 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 02:15:54.713073 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0702 02:15:54.713089 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 02:15:54.713340 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3157121439/tls.crt::/tmp/serving-cert-3157121439/tls.key" I0702 02:15:54.713361 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3157121439/tls.crt::/tmp/serving-cert-3157121439/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958553\" (2026-07-02 02:15:53 +0000 UTC to 2026-08-01 02:15:54 +0000 UTC (now=2026-07-02 02:15:54.713318436 +0000 UTC))" I0702 02:15:54.713513 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958554\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958554\" (2026-07-02 01:15:54 +0000 UTC to 2027-07-02 01:15:54 +0000 UTC (now=2026-07-02 02:15:54.713496242 +0000 UTC))" I0702 02:15:54.713540 1 secure_serving.go:213] Serving securely on [::]:8443 I0702 02:15:54.713569 1 genericapiserver.go:683] [graceful-termination] waiting for shutdown to be initiated I0702 02:15:54.713604 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0702 02:15:54.717677 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0702 02:15:54.719192 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:175 I0702 02:15:54.719288 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0702 02:15:54.726324 1 leaderelection.go:268] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0702 02:15:54.726368 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"991c8916-6ed7-44e8-8fa6-114f69238303", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11193", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-6549cb95df-l4pst_640c3b07-968e-4e2c-a674-2c00a133b7a4 became leader I0702 02:15:54.727193 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0702 02:15:54.727195 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0702 02:15:54.727225 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0702 02:15:54.727234 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0702 02:15:54.727238 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0702 02:15:54.727389 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0702 02:15:54.727705 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0702 02:15:54.727755 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0702 02:15:54.732954 1 reflector.go:368] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0702 02:15:54.733128 1 reflector.go:368] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0702 02:15:54.734599 1 reflector.go:368] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0702 02:15:54.736438 1 reflector.go:368] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0702 02:15:54.781347 1 reflector.go:368] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0702 02:15:54.813231 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 02:15:54.813243 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0702 02:15:54.813277 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 02:15:54.813455 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 02:00:44 +0000 UTC to 2036-06-29 02:00:44 +0000 UTC (now=2026-07-02 02:15:54.813422819 +0000 UTC))" I0702 02:15:54.813637 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3157121439/tls.crt::/tmp/serving-cert-3157121439/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958553\" (2026-07-02 02:15:53 +0000 UTC to 2026-08-01 02:15:54 +0000 UTC (now=2026-07-02 02:15:54.813623631 +0000 UTC))" I0702 02:15:54.813759 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958554\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958554\" (2026-07-02 01:15:54 +0000 UTC to 2027-07-02 01:15:54 +0000 UTC (now=2026-07-02 02:15:54.813746685 +0000 UTC))" I0702 02:15:54.813916 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-02 02:00:45 +0000 UTC to 2036-06-29 02:00:45 +0000 UTC (now=2026-07-02 02:15:54.813903306 +0000 UTC))" I0702 02:15:54.813943 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-02 02:00:46 +0000 UTC to 2036-06-29 02:00:46 +0000 UTC (now=2026-07-02 02:15:54.813928903 +0000 UTC))" I0702 02:15:54.813982 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-02 02:00:46 +0000 UTC to 2036-06-29 02:00:46 +0000 UTC (now=2026-07-02 02:15:54.813949929 +0000 UTC))" I0702 02:15:54.814000 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-02 02:00:47 +0000 UTC to 2036-06-29 02:00:47 +0000 UTC (now=2026-07-02 02:15:54.813992331 +0000 UTC))" I0702 02:15:54.814016 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-02 02:00:47 +0000 UTC to 2036-06-29 02:00:47 +0000 UTC (now=2026-07-02 02:15:54.814008084 +0000 UTC))" I0702 02:15:54.814031 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9ndq7b0fnq5g5hhp700fgmjc9j5kpc-kx-319c0ec54d_customer-system-admin-signer@1782957657\" [] issuer=\"\" (2026-07-02 02:00:56 +0000 UTC to 2026-07-09 02:00:57 +0000 UTC (now=2026-07-02 02:15:54.814022473 +0000 UTC))" I0702 02:15:54.814050 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9ndq7b0fnq5g5hhp700fgmjc9j5kpc-kx-319c0ec54d_sre-system-admin-signer@1782957657\" [] issuer=\"\" (2026-07-02 02:00:56 +0000 UTC to 2026-07-09 02:00:57 +0000 UTC (now=2026-07-02 02:15:54.814040865 +0000 UTC))" I0702 02:15:54.814073 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 02:00:44 +0000 UTC to 2036-06-29 02:00:44 +0000 UTC (now=2026-07-02 02:15:54.814060217 +0000 UTC))" I0702 02:15:54.814258 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3157121439/tls.crt::/tmp/serving-cert-3157121439/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958553\" (2026-07-02 02:15:53 +0000 UTC to 2026-08-01 02:15:54 +0000 UTC (now=2026-07-02 02:15:54.814243635 +0000 UTC))" I0702 02:15:54.814502 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958554\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958554\" (2026-07-02 01:15:54 +0000 UTC to 2027-07-02 01:15:54 +0000 UTC (now=2026-07-02 02:15:54.814480575 +0000 UTC))" I0702 02:15:54.827404 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0702 02:15:54.827422 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0702 02:15:54.827408 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0702 02:15:54.827436 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0702 02:15:54.827437 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0702 02:15:54.827425 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0702 02:15:54.827463 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0702 02:15:54.827458 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:15:54.827705 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0702 02:15:54.827727 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0702 02:15:54.827733 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0702 02:15:54.827753 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0702 02:15:54.827772 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0702 02:15:54.827784 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0702 02:15:54.827790 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0702 02:15:54.827795 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0702 02:15:54.827801 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0702 02:15:54.827594 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0702 02:15:54.827888 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0702 02:15:54.827890 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:15:54.827900 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:15:54.827905 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:15:54.827910 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:15:54.827894 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0702 02:15:54.828058 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0702 02:15:54.828061 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0702 02:15:54.828251 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0702 02:15:54.829365 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0702 02:15:54.829380 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0702 02:15:54.829386 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0702 02:15:54.829391 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0702 02:15:54.837380 1 reflector.go:368] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0702 02:15:54.876879 1 reflector.go:368] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0702 02:15:54.927556 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0702 02:15:54.927654 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0702 02:15:54.927688 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0702 02:15:54.927714 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0702 02:15:54.927737 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0702 02:15:54.927760 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0702 02:15:54.927770 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.927828 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.927984 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.927571 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0702 02:15:54.928125 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0702 02:15:54.928150 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0702 02:15:54.928175 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0702 02:15:54.928198 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0702 02:15:54.928222 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0702 02:15:54.928178 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.927730 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.928209 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0702 02:15:54.928225 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0702 02:15:54.927610 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0702 02:15:54.928864 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:15:54.928876 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:15:54.928883 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:15:54.928890 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:15:54.928896 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:15:54.942964 1 configmap.go:109] updating configmap open-cluster-management-2r9ndq7b0fnq5g5hhp700fgmjc9j5kpc/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.944851 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.945141 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.948272 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.948364 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.954064 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0702 02:15:54.960695 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.961767 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.965596 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:54.966065 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:55.138900 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:55.347871 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:55.540597 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:55.742710 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:55.940290 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:56.140324 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:56.340772 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:56.541410 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:56.740485 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:56.941755 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:57.140822 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:57.343603 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:57.543504 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:57.741921 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:57.940492 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:58.142548 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:58.340018 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:58.540876 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:58.741868 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:58.940930 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0702 02:15:59.139884 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0702 02:15:59.142094 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:59.340483 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:59.541543 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:59.740831 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0702 02:15:59.939792 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:00.140242 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0702 02:16:00.340215 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:00.539885 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:00.741469 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:00.939732 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:01.140885 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:01.338982 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:01.538847 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:01.740750 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:01.942232 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0702 02:16:02.140542 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:02.340403 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:02.540840 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:02.743135 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:02.943002 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0702 02:16:03.139188 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:03.345799 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0702 02:16:03.543124 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:03.740127 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:03.940280 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:04.140177 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:04.341370 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:04.542456 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:04.739777 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:04.940919 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:05.138893 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:05.341302 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:05.538949 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:05.739153 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:05.939383 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:06.139634 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:06.339190 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:06.539273 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:06.738854 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:06.938091 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:07.138870 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:07.339928 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:07.538609 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:07.738626 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:07.939978 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:08.139053 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:08.338033 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:08.538562 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:08.738259 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:08.938050 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:09.138601 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:09.339880 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0702 02:16:22.859402 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0702 02:16:22.878736 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0702 02:16:27.092850 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0702 02:16:27.096616 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0702 02:16:33.823034 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0702 02:17:14.103076 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0702 02:20:14.009490 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0702 02:20:41.611155 1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:41.897788 1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.696213 1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.696241 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.708617 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.727109 1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.738642 1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.750051 1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle I0702 02:20:46.762230 1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:27.829200 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0702 02:21:40.434917 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:58.559748 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 02:27:20.747907 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0702 02:27:24.440610 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0702 02:27:24.533914 1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle I0702 02:27:24.635742 1 configmap.go:109] updating configmap open-cluster-management-2r9ndq7b0fnq5g5hhp700fgmjc9j5kpc/config-service-cabundle with the service signing CA bundle I0702 02:27:24.743111 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0702 02:27:24.835498 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0702 02:27:24.933347 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0702 02:27:25.034801 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0702 02:27:25.134025 1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle I0702 02:27:25.233757 1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle I0702 02:27:25.335838 1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle I0702 02:27:25.435245 1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle I0702 02:27:25.539335 1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle I0702 02:27:25.633229 1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle I0702 02:27:25.773294 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0702 02:29:35.909087 1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle I0702 02:29:35.923999 1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle I0702 02:29:35.952173 1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle I0702 02:29:35.969924 1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle I0702 02:29:38.130269 1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle I0702 02:29:38.184443 1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle I0702 02:29:38.241529 1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle I0702 02:29:38.350857 1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle W0702 02:35:54.877953 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0702 02:55:54.877997 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"