Copying system trust bundle W0424 12:24:32.346459 1 cmd.go:167] Unable to read initial content of "/tmp/terminate": open /tmp/terminate: no such file or directory I0424 12:24:32.347483 1 cmd.go:253] Using service-serving-cert provided certificates I0424 12:24:32.350877 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0424 12:24:32.351471 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0424 12:24:32.351515 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0424 12:24:32.351580 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0424 12:24:32.351600 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0424 12:24:32.353496 1 observer_polling.go:159] Starting file observer I0424 12:24:32.353924 1 observer_polling.go:159] Starting file observer I0424 12:24:32.428686 1 builder.go:304] cluster-authentication-operator version - I0424 12:24:32.429781 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0424 12:24:32.974158 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0424 12:24:32.987174 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0424 12:24:32.987256 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0424 12:24:32.987291 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0424 12:24:32.987310 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0424 12:24:33.112465 1 secure_serving.go:57] Forcing use of http/1.1 only W0424 12:24:33.112499 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0424 12:24:33.112505 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0424 12:24:33.112514 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0424 12:24:33.112517 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0424 12:24:33.112520 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. I0424 12:24:33.117338 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0424 12:24:33.117405 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0424 12:24:33.121268 1 leaderelection.go:257] attempting to acquire leader lease openshift-authentication-operator/cluster-authentication-operator-lock... I0424 12:24:33.140274 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:08:56 +0000 UTC to 2028-04-23 11:08:57 +0000 UTC (now=2026-04-24 12:24:33.14023488 +0000 UTC))" I0424 12:24:33.146736 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033472\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033472\" (2026-04-24 11:24:32 +0000 UTC to 2027-04-24 11:24:32 +0000 UTC (now=2026-04-24 12:24:33.146696642 +0000 UTC))" I0424 12:24:33.146761 1 secure_serving.go:213] Serving securely on [::]:8443 I0424 12:24:33.146878 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0424 12:24:33.146139 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0424 12:24:33.146909 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0424 12:24:33.147015 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0424 12:24:33.147912 1 leaderelection.go:271] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock I0424 12:24:33.151222 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"297d6eb5-05b3-4fe7-93bf-1042c67da4af", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"48302", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' authentication-operator-9f44cc54b-qvdc2_145f522c-4186-4912-9cf6-7699b452d499 became leader I0424 12:24:33.146169 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0424 12:24:33.151259 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 12:24:33.146194 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0424 12:24:33.151273 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 12:24:33.146231 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0424 12:24:33.162706 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0424 12:24:33.167842 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0424 12:24:33.169805 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I0424 12:24:33.256164 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 12:24:33.256274 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 12:24:33.256543 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:24:33.256493129 +0000 UTC))" I0424 12:24:33.256797 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:08:56 +0000 UTC to 2028-04-23 11:08:57 +0000 UTC (now=2026-04-24 12:24:33.256768696 +0000 UTC))" I0424 12:24:33.257018 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033472\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033472\" (2026-04-24 11:24:32 +0000 UTC to 2027-04-24 11:24:32 +0000 UTC (now=2026-04-24 12:24:33.256998675 +0000 UTC))" I0424 12:24:33.266376 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-24 10:50:22 +0000 UTC to 2036-04-21 10:50:22 +0000 UTC (now=2026-04-24 12:24:33.266335011 +0000 UTC))" I0424 12:24:33.266465 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"\" (2026-04-24 10:50:25 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:24:33.266444485 +0000 UTC))" I0424 12:24:33.266500 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:24:33.266486505 +0000 UTC))" I0424 12:24:33.266548 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:24:33.266519841 +0000 UTC))" I0424 12:24:33.266593 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"\" (2026-04-24 10:50:23 +0000 UTC to 2036-04-21 10:50:23 +0000 UTC (now=2026-04-24 12:24:33.266578851 +0000 UTC))" I0424 12:24:33.266635 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777028935\" [] issuer=\"kubelet-signer\" (2026-04-24 11:08:54 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:24:33.266621996 +0000 UTC))" I0424 12:24:33.266676 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777028934\" [] issuer=\"\" (2026-04-24 11:08:53 +0000 UTC to 2029-04-23 11:08:54 +0000 UTC (now=2026-04-24 12:24:33.266656025 +0000 UTC))" I0424 12:24:33.266724 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:24:33.266694896 +0000 UTC))" I0424 12:24:33.269038 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:08:56 +0000 UTC to 2028-04-23 11:08:57 +0000 UTC (now=2026-04-24 12:24:33.269010755 +0000 UTC))" I0424 12:24:33.269285 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033472\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033472\" (2026-04-24 11:24:32 +0000 UTC to 2027-04-24 11:24:32 +0000 UTC (now=2026-04-24 12:24:33.269262972 +0000 UTC))" I0424 12:24:33.269352 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0424 12:24:33.533189 1 simple_featuregate_reader.go:171] Starting feature-gate-detector I0424 12:24:33.538735 1 reflector.go:376] Caches populated for *v1.FeatureGate from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.539259 1 reflector.go:376] Caches populated for *v1.APIServer from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.540126 1 reflector.go:376] Caches populated for *v1.OAuth from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.540729 1 reflector.go:376] Caches populated for *v1.Ingress from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.541112 1 reflector.go:376] Caches populated for *v1.Infrastructure from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.541509 1 reflector.go:376] Caches populated for *v1.Console from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.542426 1 reflector.go:376] Caches populated for *v1.ClusterVersion from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.543145 1 base_controller.go:76] Waiting for caches to sync for auditPolicyController I0424 12:24:33.543166 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'FeatureGatesInitialized' FeatureGates updated to featuregates.Features{Enabled:[]v1.FeatureGateName{"AWSEFSDriverVolumeMetrics", "AdditionalRoutingCapabilities", "AdminNetworkPolicy", "AlibabaPlatform", "AzureWorkloadIdentity", "BareMetalLoadBalancer", "BuildCSIVolumes", "CPMSMachineNamePrefix", "ChunkSizeMiB", "CloudDualStackNodeIPs", "ConsolePluginContentSecurityPolicy", "DisableKubeletCloudCredentialProviders", "GCPLabelsTags", "GatewayAPI", "GatewayAPIController", "HardwareSpeed", "IngressControllerLBSubnetsAWS", "KMSv1", "MachineConfigNodes", "ManagedBootImages", "ManagedBootImagesAWS", "MetricsCollectionProfiles", "MultiArchInstallAWS", "MultiArchInstallGCP", "NetworkDiagnosticsConfig", "NetworkLiveMigration", "NetworkSegmentation", "NewOLM", "NodeDisruptionPolicy", "OnClusterBuild", "PersistentIPsForVirtualization", "PinnedImages", "PrivateHostedZoneAWS", "RouteAdvertisements", "RouteExternalCertificate", "ServiceAccountTokenNodeBinding", "SetEIPForNLBIngressController", "VSphereDriverConfiguration", "VSphereMultiVCenters", "ValidatingAdmissionPolicy"}, Disabled:[]v1.FeatureGateName{"AWSClusterHostedDNS", "AutomatedEtcdBackup", "BootcNodeManagement", "ClusterAPIInstall", "ClusterAPIInstallIBMCloud", "ClusterMonitoringConfig", "ClusterVersionOperatorConfiguration", "DNSNameResolver", "DualReplica", "DyanmicServiceEndpointIBMCloud", "DynamicResourceAllocation", "EtcdBackendQuota", "EventedPLEG", "Example", "Example2", "ExternalOIDC", "ExternalOIDCWithUIDAndExtraClaimMappings", "GCPClusterHostedDNS", "GCPCustomAPIEndpoints", "HighlyAvailableArbiter", "ImageStreamImportMode", "IngressControllerDynamicConfigurationManager", "InsightsConfig", "InsightsConfigAPI", "InsightsOnDemandDataGather", "InsightsRuntimeExtractor", "KMSEncryptionProvider", "MachineAPIMigration", "MachineAPIOperatorDisableMachineHealthCheckController", "MachineAPIProviderOpenStack", "MaxUnavailableStatefulSet", "MinimumKubeletVersion", "MixedCPUsAllocation", "MultiArchInstallAzure", "NewOLMCatalogdAPIV1Metas", "NewOLMOwnSingleNamespace", "NewOLMPreflightPermissionChecks", "NodeSwap", "NutanixMultiSubnets", "OVNObservability", "OpenShiftPodSecurityAdmission", "PlatformOperators", "ProcMountType", "SELinuxChangePolicy", "SELinuxMount", "ShortCertRotation", "SignatureStores", "SigstoreImageVerification", "SigstoreImageVerificationPKI", "StreamingCollectionEncodingToJSON", "StreamingCollectionEncodingToProtobuf", "TranslateStreamCloseWebsocketRequests", "UpgradeStatus", "UserNamespacesPodSecurityStandards", "UserNamespacesSupport", "VSphereConfigurableMaxAllowedBlockVolumesPerNode", "VSphereHostVMGroupZonal", "VSphereMultiDisk", "VSphereMultiNetworks", "VolumeAttributesClass", "VolumeGroupSnapshot"}} I0424 12:24:33.549670 1 base_controller.go:76] Waiting for caches to sync for LoggingSyncer I0424 12:24:33.550890 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorController I0424 12:24:33.551082 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0424 12:24:33.551329 1 base_controller.go:76] Waiting for caches to sync for RevisionController I0424 12:24:33.551375 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0424 12:24:33.551563 1 base_controller.go:76] Waiting for caches to sync for OAuthServer-WorkloadWorkloadController I0424 12:24:33.553864 1 base_controller.go:76] Waiting for caches to sync for OAuthAPIServerController-WorkloadWorkloadController I0424 12:24:33.554704 1 base_controller.go:76] Waiting for caches to sync for SecretRevisionPruneController I0424 12:24:33.555096 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionKey I0424 12:24:33.555294 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionPrune I0424 12:24:33.555388 1 base_controller.go:76] Waiting for caches to sync for openshift-apiserver-APIService I0424 12:24:33.551656 1 base_controller.go:76] Waiting for caches to sync for authentication-ManagementState I0424 12:24:33.551737 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-Metadata I0424 12:24:33.558625 1 base_controller.go:76] Waiting for caches to sync for OpenshiftAuthenticationStaticResources-StaticResources I0424 12:24:33.558918 1 base_controller.go:76] Waiting for caches to sync for WellKnownReadyController I0424 12:24:33.551790 1 base_controller.go:76] Waiting for caches to sync for OAuthClientsController I0424 12:24:33.551835 1 base_controller.go:76] Waiting for caches to sync for APIServerStaticResources-StaticResources I0424 12:24:33.551867 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-PayloadConfig I0424 12:24:33.551974 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionState I0424 12:24:33.552031 1 base_controller.go:76] Waiting for caches to sync for RouterCertsDomainValidationController I0424 12:24:33.560382 1 base_controller.go:76] Waiting for caches to sync for OAuthServerRouteEndpointAccessibleController I0424 12:24:33.552104 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionMigration I0424 12:24:33.552160 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionCondition I0424 12:24:33.552391 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-ServiceCA I0424 12:24:33.560622 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointAccessibleController I0424 12:24:33.553728 1 base_controller.go:76] Waiting for caches to sync for NamespaceFinalizerController_openshift-oauth-apiserver I0424 12:24:33.560798 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointsEndpointAccessibleController I0424 12:24:33.560835 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressNodesAvailable I0424 12:24:33.560887 1 base_controller.go:76] Waiting for caches to sync for ProxyConfigController I0424 12:24:33.560922 1 base_controller.go:76] Waiting for caches to sync for CustomRouteController I0424 12:24:33.560954 1 base_controller.go:76] Waiting for caches to sync for TrustDistributionController I0424 12:24:33.561013 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-RemoveStaleConditions I0424 12:24:33.569061 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0424 12:24:33.569087 1 base_controller.go:76] Waiting for caches to sync for OpenShiftAuthenticatorCertRequester I0424 12:24:33.571150 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressState I0424 12:24:33.574064 1 base_controller.go:76] Waiting for caches to sync for oauth-server I0424 12:24:33.574830 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-UnsupportedConfigOverrides I0424 12:24:33.579565 1 base_controller.go:76] Waiting for caches to sync for StatusSyncer_authentication I0424 12:24:33.580203 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.580304 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.580369 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.580425 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.588151 1 reflector.go:376] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.592184 1 reflector.go:376] Caches populated for *v1.Role from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.593050 1 reflector.go:376] Caches populated for *v1.RoleBinding from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.595849 1 reflector.go:376] Caches populated for *v1.CertificateSigningRequest from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.602766 1 reflector.go:376] Caches populated for *v1.DaemonSet from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.604897 1 reflector.go:376] Caches populated for *v1.ClusterRoleBinding from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.609998 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0424 12:24:33.614164 1 reflector.go:376] Caches populated for operator.openshift.io/v1, Resource=authentications from k8s.io/client-go/dynamic/dynamicinformer/informer.go:108 I0424 12:24:33.615339 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.615410 1 reflector.go:376] Caches populated for *v1.Authentication from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.598870 1 reflector.go:376] Caches populated for *v1.OAuthClient from github.com/openshift/client-go/oauth/informers/externalversions/factory.go:125 I0424 12:24:33.598948 1 reflector.go:376] Caches populated for *v1.Route from github.com/openshift/client-go/route/informers/externalversions/factory.go:125 I0424 12:24:33.615937 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.598179 1 reflector.go:376] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.620180 1 reflector.go:376] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.620804 1 reflector.go:376] Caches populated for *v1.IngressController from github.com/openshift/client-go/operator/informers/externalversions/factory.go:125 I0424 12:24:33.621246 1 reflector.go:376] Caches populated for *v1alpha1.StorageVersionMigration from sigs.k8s.io/kube-storage-version-migrator/pkg/clients/informer/factory.go:132 I0424 12:24:33.630409 1 reflector.go:376] Caches populated for *v1.ClusterOperator from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.635659 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:24:33.643763 1 base_controller.go:82] Caches are synced for auditPolicyController I0424 12:24:33.643778 1 base_controller.go:119] Starting #1 worker of auditPolicyController controller ... I0424 12:24:33.650575 1 base_controller.go:82] Caches are synced for LoggingSyncer I0424 12:24:33.650591 1 base_controller.go:119] Starting #1 worker of LoggingSyncer controller ... I0424 12:24:33.651655 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0424 12:24:33.651684 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorCertApprover_OpenShiftAuthenticator controller ... I0424 12:24:33.661970 1 base_controller.go:82] Caches are synced for OAuthClientsController I0424 12:24:33.663111 1 base_controller.go:119] Starting #1 worker of OAuthClientsController controller ... I0424 12:24:33.663575 1 base_controller.go:82] Caches are synced for APIServerStaticResources-StaticResources I0424 12:24:33.663631 1 base_controller.go:119] Starting #1 worker of APIServerStaticResources-StaticResources controller ... I0424 12:24:33.668302 1 base_controller.go:82] Caches are synced for openshift-authentication-RemoveStaleConditions I0424 12:24:33.668314 1 base_controller.go:119] Starting #1 worker of openshift-authentication-RemoveStaleConditions controller ... I0424 12:24:33.683277 1 base_controller.go:82] Caches are synced for StatusSyncer_authentication I0424 12:24:33.683302 1 base_controller.go:119] Starting #1 worker of StatusSyncer_authentication controller ... I0424 12:24:33.683345 1 base_controller.go:82] Caches are synced for openshift-authentication-UnsupportedConfigOverrides I0424 12:24:33.683350 1 base_controller.go:119] Starting #1 worker of openshift-authentication-UnsupportedConfigOverrides controller ... I0424 12:24:33.687185 1 base_controller.go:82] Caches are synced for authentication-ManagementState I0424 12:24:33.687201 1 base_controller.go:119] Starting #1 worker of authentication-ManagementState controller ... I0424 12:24:33.753653 1 reflector.go:376] Caches populated for *v1.Proxy from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:24:33.835473 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0424 12:24:34.039869 1 reflector.go:376] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0424 12:24:34.233514 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:34.252326 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorController I0424 12:24:34.252349 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorController controller ... I0424 12:24:34.252335 1 base_controller.go:82] Caches are synced for RevisionController I0424 12:24:34.252377 1 base_controller.go:119] Starting #1 worker of RevisionController controller ... I0424 12:24:34.269216 1 base_controller.go:82] Caches are synced for OpenShiftAuthenticatorCertRequester I0424 12:24:34.269247 1 base_controller.go:119] Starting #1 worker of OpenShiftAuthenticatorCertRequester controller ... I0424 12:24:34.434951 1 reflector.go:376] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0424 12:24:34.456622 1 base_controller.go:82] Caches are synced for SecretRevisionPruneController I0424 12:24:34.456645 1 base_controller.go:119] Starting #1 worker of SecretRevisionPruneController controller ... I0424 12:24:34.469712 1 base_controller.go:82] Caches are synced for NamespaceFinalizerController_openshift-oauth-apiserver I0424 12:24:34.469733 1 base_controller.go:119] Starting #1 worker of NamespaceFinalizerController_openshift-oauth-apiserver controller ... I0424 12:24:34.631182 1 request.go:729] Waited for 1.061175502s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/configmaps?limit=500&resourceVersion=0 I0424 12:24:34.638560 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:34.833560 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:35.039977 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:35.257357 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:35.433702 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:24:35.469729 1 base_controller.go:82] Caches are synced for ConfigObserver I0424 12:24:35.469821 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0424 12:24:35.635086 1 request.go:729] Waited for 2.064811336s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces?limit=500&resourceVersion=0 I0424 12:24:35.640030 1 reflector.go:376] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0424 12:24:35.834841 1 reflector.go:376] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0424 12:24:36.033418 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0424 12:24:36.233793 1 reflector.go:376] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0424 12:24:36.434415 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:24:36.474348 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressState I0424 12:24:36.474371 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressState controller ... I0424 12:24:36.650681 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:36.663587 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointAccessibleController I0424 12:24:36.663605 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointAccessibleController controller ... I0424 12:24:36.668267 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointsEndpointAccessibleController I0424 12:24:36.668283 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointsEndpointAccessibleController controller ... I0424 12:24:36.831757 1 request.go:729] Waited for 3.261033036s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets?limit=500&resourceVersion=0 I0424 12:24:36.854694 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:36.857763 1 base_controller.go:82] Caches are synced for openshift-authentication-Metadata I0424 12:24:36.857779 1 base_controller.go:119] Starting #1 worker of openshift-authentication-Metadata controller ... I0424 12:24:36.859047 1 base_controller.go:82] Caches are synced for OpenshiftAuthenticationStaticResources-StaticResources I0424 12:24:36.859060 1 base_controller.go:119] Starting #1 worker of OpenshiftAuthenticationStaticResources-StaticResources controller ... I0424 12:24:36.861306 1 base_controller.go:82] Caches are synced for openshift-authentication-ServiceCA I0424 12:24:36.861321 1 base_controller.go:119] Starting #1 worker of openshift-authentication-ServiceCA controller ... I0424 12:24:36.861355 1 base_controller.go:82] Caches are synced for openshift-authentication-PayloadConfig I0424 12:24:36.861365 1 base_controller.go:119] Starting #1 worker of openshift-authentication-PayloadConfig controller ... I0424 12:24:36.868117 1 base_controller.go:82] Caches are synced for TrustDistributionController I0424 12:24:36.868141 1 base_controller.go:119] Starting #1 worker of TrustDistributionController controller ... I0424 12:24:37.034317 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:37.233670 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:37.268989 1 base_controller.go:82] Caches are synced for CustomRouteController I0424 12:24:37.269015 1 base_controller.go:119] Starting #1 worker of CustomRouteController controller ... I0424 12:24:37.473194 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:37.562410 1 base_controller.go:82] Caches are synced for RouterCertsDomainValidationController I0424 12:24:37.562432 1 base_controller.go:119] Starting #1 worker of RouterCertsDomainValidationController controller ... I0424 12:24:37.562906 1 base_controller.go:82] Caches are synced for OAuthServerRouteEndpointAccessibleController I0424 12:24:37.562916 1 base_controller.go:119] Starting #1 worker of OAuthServerRouteEndpointAccessibleController controller ... I0424 12:24:37.562937 1 base_controller.go:82] Caches are synced for WellKnownReadyController I0424 12:24:37.562941 1 base_controller.go:119] Starting #1 worker of WellKnownReadyController controller ... I0424 12:24:37.578883 1 base_controller.go:82] Caches are synced for ConfigObserver I0424 12:24:37.578904 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0424 12:24:37.579884 1 base_controller.go:82] Caches are synced for ProxyConfigController I0424 12:24:37.579895 1 base_controller.go:119] Starting #1 worker of ProxyConfigController controller ... I0424 12:24:37.635794 1 reflector.go:376] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0424 12:24:37.654221 1 base_controller.go:82] Caches are synced for OAuthServer-WorkloadWorkloadController I0424 12:24:37.654245 1 base_controller.go:119] Starting #1 worker of OAuthServer-WorkloadWorkloadController controller ... I0424 12:24:37.660612 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionMigration I0424 12:24:37.660742 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionMigration controller ... I0424 12:24:37.660772 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionState I0424 12:24:37.660777 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionState controller ... I0424 12:24:37.663783 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionCondition I0424 12:24:37.663806 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionCondition controller ... I0424 12:24:37.668286 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressNodesAvailable I0424 12:24:37.668301 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressNodesAvailable controller ... I0424 12:24:37.672765 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionKey I0424 12:24:37.672779 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionKey controller ... I0424 12:24:37.672795 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionPrune I0424 12:24:37.672799 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionPrune controller ... I0424 12:24:37.833620 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:24:37.855728 1 base_controller.go:82] Caches are synced for openshift-apiserver-APIService I0424 12:24:37.855750 1 base_controller.go:119] Starting #1 worker of openshift-apiserver-APIService controller ... I0424 12:24:38.033617 1 request.go:729] Waited for 4.460156356s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets?limit=500&resourceVersion=0 I0424 12:24:38.040519 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:24:38.075043 1 base_controller.go:82] Caches are synced for oauth-server I0424 12:24:38.075159 1 base_controller.go:119] Starting #1 worker of oauth-server controller ... I0424 12:24:38.235942 1 reflector.go:376] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0424 12:24:38.272991 1 base_controller.go:82] Caches are synced for OAuthAPIServerController-WorkloadWorkloadController I0424 12:24:38.273009 1 base_controller.go:119] Starting #1 worker of OAuthAPIServerController-WorkloadWorkloadController controller ... I0424 12:24:39.034274 1 request.go:729] Waited for 4.764899366s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/openshift-authenticator-certs I0424 12:24:40.231553 1 request.go:729] Waited for 3.364893327s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-metadata I0424 12:24:41.232704 1 request.go:729] Waited for 2.593881796s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api I0424 12:24:42.432013 1 request.go:729] Waited for 1.596113002s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system I0424 12:24:43.632913 1 request.go:729] Waited for 1.587130578s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig W0424 12:25:14.005282 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:25:14.005315 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:25:14.005320 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:25:14.005326 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:25:14.005330 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:25:14.067061 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:25:14.093402 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()" to "All is well" I0424 12:25:15.187449 1 request.go:729] Waited for 1.07903786s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:25:16.194137 1 request.go:729] Waited for 1.088237808s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift W0424 12:25:17.058314 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:25:17.058411 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:25:17.058432 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:25:17.058450 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:25:17.211263 1 request.go:729] Waited for 1.21723372s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0424 12:25:17.233162 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-qwd88 pod)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:25:17.292237 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-qwd88 pod)" I0424 12:25:18.387222 1 request.go:729] Waited for 1.180094207s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0424 12:25:19.387682 1 request.go:729] Waited for 1.983791496s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-7b745568db-jfzg5 I0424 12:25:20.588668 1 request.go:729] Waited for 1.785734595s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs W0424 12:25:21.613381 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:25:21.613402 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:25:21.613407 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:25:21.613412 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:25:21.613416 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:25:21.654943 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:25:21.672190 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-qwd88 pod)" to "All is well" I0424 12:25:22.788056 1 request.go:729] Waited for 1.134001808s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs I0424 12:25:23.987646 1 request.go:729] Waited for 1.559712239s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0424 12:25:25.187406 1 request.go:729] Waited for 1.145473473s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift W0424 12:25:48.500970 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:25:48.500988 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:25:48.500994 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:25:48.500997 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:25:48.533061 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 3/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:25:48.558494 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available" to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 3/3 pods have been updated to the latest generation and 2/3 pods are available" I0424 12:25:49.683632 1 request.go:729] Waited for 1.115031621s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/etcd-serving-ca W0424 12:26:12.422826 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:26:12.422847 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:26:12.422852 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:26:12.422857 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:26:12.422863 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:26:12.457900 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:26:12.467930 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing changed from True to False ("AuthenticatorCertKeyProgressing: All is well") I0424 12:26:13.576880 1 request.go:729] Waited for 1.108928747s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events I0424 12:26:15.177067 1 request.go:729] Waited for 1.124286075s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift W0424 12:26:31.207878 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:26:31.207896 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:26:31.207901 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:26:31.207906 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:26:31.287722 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:26:31.339087 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()" I0424 12:26:32.373379 1 request.go:729] Waited for 1.083853167s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs I0424 12:26:33.373740 1 request.go:729] Waited for 1.315413174s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift I0424 12:26:34.374271 1 request.go:729] Waited for 1.19474979s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-c465db847-24sr6 I0424 12:26:35.573748 1 request.go:729] Waited for 1.103341092s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver W0424 12:26:37.785075 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:26:37.785093 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:26:37.785098 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:26:37.785102 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:26:37.809600 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:26:37.828398 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" I0424 12:26:37.973821 1 request.go:729] Waited for 1.112795234s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0424 12:26:38.974050 1 request.go:729] Waited for 1.165090573s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:26:39.974326 1 request.go:729] Waited for 1.59552662s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle I0424 12:26:41.173949 1 request.go:729] Waited for 1.188021593s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client W0424 12:27:15.594367 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:27:15.594518 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:27:15.594565 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:27:15.594590 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:27:15.594606 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:27:15.629197 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:27:15.648969 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" I0424 12:27:16.768547 1 request.go:729] Waited for 1.057335251s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift I0424 12:27:17.969838 1 request.go:729] Waited for 1.106746907s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift W0424 12:27:18.583616 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:27:18.583632 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:27:18.583637 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:27:18.583641 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:27:18.624230 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-7wlfj pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:27:18.645588 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-7wlfj pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" W0424 12:27:19.182252 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:27:19.182269 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:27:19.182271 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:27:19.182274 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:27:19.182278 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:27:19.219948 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-7wlfj pod)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:27:19.236964 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-7wlfj pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-7wlfj pod)" I0424 12:27:19.768797 1 request.go:729] Waited for 1.153394734s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:27:20.968800 1 request.go:729] Waited for 1.75543242s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets/kubeadmin I0424 12:27:22.168940 1 request.go:729] Waited for 1.989948079s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api W0424 12:27:23.181112 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:27:23.181140 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:27:23.181145 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:27:23.181151 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:27:23.181155 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:27:23.221605 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:27:23.243404 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-7wlfj pod)" to "All is well" I0424 12:27:23.369132 1 request.go:729] Waited for 1.795710571s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:27:24.568796 1 request.go:729] Waited for 1.585764221s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets/kubeadmin I0424 12:27:25.768459 1 request.go:729] Waited for 1.776617s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:27:26.768577 1 request.go:729] Waited for 1.393967816s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:27:27.768848 1 request.go:729] Waited for 1.196740101s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle I0424 12:27:28.970192 1 request.go:729] Waited for 1.395792963s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-c465db847-lwt5d W0424 12:28:35.475086 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:28:35.475146 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:28:35.475153 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:28:35.475158 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:28:35.525964 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:28:35.544921 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()" I0424 12:28:36.666288 1 request.go:729] Waited for 1.141383732s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit I0424 12:28:37.866594 1 request.go:729] Waited for 1.596404869s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs W0424 12:28:39.675893 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:28:39.675909 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:28:39.675913 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:28:39.675916 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:28:39.700379 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:28:39.717346 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" I0424 12:28:40.866081 1 request.go:729] Waited for 1.159608688s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:28:42.065951 1 request.go:729] Waited for 1.593407824s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api W0424 12:29:24.672162 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:29:24.672246 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:29:24.672286 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:29:24.672303 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:29:24.672319 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:29:24.752809 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:29:24.787669 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" I0424 12:29:26.128585 1 request.go:729] Waited for 1.146492967s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift W0424 12:29:26.539185 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:29:26.539202 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:29:26.539205 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:29:26.539209 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:29:26.581329 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:29:26.624395 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" I0424 12:29:27.329074 1 request.go:729] Waited for 1.195034178s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/services/oauth-openshift I0424 12:29:28.331647 1 request.go:729] Waited for 1.707231115s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events I0424 12:29:29.529080 1 request.go:729] Waited for 1.596785864s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0424 12:29:30.730543 1 request.go:729] Waited for 1.544314064s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift W0424 12:29:30.941772 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:29:30.941790 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:29:30.941794 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:29:30.941800 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:29:30.941805 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:29:30.973155 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:29:31.002709 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" W0424 12:29:31.341077 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:29:31.341095 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:29:31.341098 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:29:31.341103 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:29:31.341108 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:29:31.403668 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:26:12Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:29:31.449066 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication ()" to "All is well" I0424 12:29:31.928569 1 request.go:729] Waited for 1.395145794s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0424 12:29:32.928978 1 request.go:729] Waited for 1.92625438s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events I0424 12:29:33.930178 1 request.go:729] Waited for 1.742623297s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0424 12:29:35.130468 1 request.go:729] Waited for 1.791270985s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api I0424 12:29:36.328733 1 request.go:729] Waited for 1.992330228s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs I0424 12:29:37.329278 1 request.go:729] Waited for 1.995785398s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-c465db847-6tzz4 I0424 12:29:38.534359 1 request.go:729] Waited for 1.385133688s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:29:39.728448 1 request.go:729] Waited for 1.18192407s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api I0424 12:34:34.996056 1 request.go:729] Waited for 1.153790784s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config/secrets/webhook-authentication-integrated-oauth I0424 12:34:36.195590 1 request.go:729] Waited for 1.595999848s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/services/oauth-openshift I0424 12:34:37.196140 1 request.go:729] Waited for 1.553101809s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets/kubeadmin I0424 12:34:38.396485 1 request.go:729] Waited for 2.162317407s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift I0424 12:34:39.596175 1 request.go:729] Waited for 1.793757701s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca I0424 12:34:40.796090 1 request.go:729] Waited for 1.794597014s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0424 12:34:41.995888 1 request.go:729] Waited for 1.588354661s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0424 12:34:42.996431 1 request.go:729] Waited for 1.195583285s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-c465db847-lwt5d