Copying system trust bundle W0424 12:20:21.877664 1 cmd.go:167] Unable to read initial content of "/tmp/terminate": open /tmp/terminate: no such file or directory I0424 12:20:21.877913 1 observer_polling.go:159] Starting file observer I0424 12:20:21.878173 1 cmd.go:253] Using service-serving-cert provided certificates I0424 12:20:21.878201 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0424 12:20:21.878483 1 observer_polling.go:159] Starting file observer I0424 12:20:21.878515 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0424 12:20:21.878544 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0424 12:20:21.878549 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0424 12:20:21.878552 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0424 12:20:28.705144 1 builder.go:304] cluster-authentication-operator version - I0424 12:20:28.705995 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0424 12:20:29.302553 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0424 12:20:33.265613 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0424 12:20:33.265637 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0424 12:20:33.265655 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0424 12:20:33.265661 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0424 12:20:33.313565 1 secure_serving.go:57] Forcing use of http/1.1 only W0424 12:20:33.313664 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0424 12:20:33.313684 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0424 12:20:33.313700 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0424 12:20:33.313715 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0424 12:20:33.313729 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0424 12:20:33.313744 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0424 12:20:33.314033 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I0424 12:20:34.214400 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:08:56 +0000 UTC to 2028-04-23 11:08:57 +0000 UTC (now=2026-04-24 12:20:34.214358889 +0000 UTC))" I0424 12:20:34.214610 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033229\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033228\" (2026-04-24 11:20:28 +0000 UTC to 2027-04-24 11:20:28 +0000 UTC (now=2026-04-24 12:20:34.214586704 +0000 UTC))" I0424 12:20:34.214626 1 secure_serving.go:213] Serving securely on [::]:8443 I0424 12:20:34.214648 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0424 12:20:34.214671 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0424 12:20:34.214690 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0424 12:20:34.214718 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0424 12:20:34.214812 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0424 12:20:34.220291 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0424 12:20:34.220308 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 12:20:34.220326 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0424 12:20:34.220331 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 12:20:34.223135 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I0424 12:20:34.223546 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0424 12:20:34.223710 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0424 12:20:34.224776 1 leaderelection.go:257] attempting to acquire leader lease openshift-authentication-operator/cluster-authentication-operator-lock... I0424 12:20:34.316582 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0424 12:20:34.320585 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 12:20:34.320667 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 12:20:34.320899 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:20:34.320866326 +0000 UTC))" I0424 12:20:34.321159 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:08:56 +0000 UTC to 2028-04-23 11:08:57 +0000 UTC (now=2026-04-24 12:20:34.321135714 +0000 UTC))" I0424 12:20:34.321682 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033229\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033228\" (2026-04-24 11:20:28 +0000 UTC to 2027-04-24 11:20:28 +0000 UTC (now=2026-04-24 12:20:34.321660533 +0000 UTC))" I0424 12:20:34.323954 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-24 10:50:22 +0000 UTC to 2036-04-21 10:50:22 +0000 UTC (now=2026-04-24 12:20:34.323926073 +0000 UTC))" I0424 12:20:34.324141 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"\" (2026-04-24 10:50:25 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:20:34.324107632 +0000 UTC))" I0424 12:20:34.324177 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:20:34.324163868 +0000 UTC))" I0424 12:20:34.324213 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:20:34.324195809 +0000 UTC))" I0424 12:20:34.324706 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"\" (2026-04-24 10:50:23 +0000 UTC to 2036-04-21 10:50:23 +0000 UTC (now=2026-04-24 12:20:34.324674617 +0000 UTC))" I0424 12:20:34.324747 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777028935\" [] issuer=\"kubelet-signer\" (2026-04-24 11:08:54 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:20:34.324731439 +0000 UTC))" I0424 12:20:34.324792 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777028934\" [] issuer=\"\" (2026-04-24 11:08:53 +0000 UTC to 2029-04-23 11:08:54 +0000 UTC (now=2026-04-24 12:20:34.32477196 +0000 UTC))" I0424 12:20:34.324828 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:20:34.324813228 +0000 UTC))" I0424 12:20:34.325066 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"metrics.openshift-authentication-operator.svc\" [serving] validServingFor=[metrics.openshift-authentication-operator.svc,metrics.openshift-authentication-operator.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:08:56 +0000 UTC to 2028-04-23 11:08:57 +0000 UTC (now=2026-04-24 12:20:34.325046253 +0000 UTC))" I0424 12:20:34.325260 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033229\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033228\" (2026-04-24 11:20:28 +0000 UTC to 2027-04-24 11:20:28 +0000 UTC (now=2026-04-24 12:20:34.325244924 +0000 UTC))" I0424 12:20:34.566963 1 leaderelection.go:271] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock I0424 12:20:34.567258 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"297d6eb5-05b3-4fe7-93bf-1042c67da4af", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"36981", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' authentication-operator-9f44cc54b-qvdc2_aa0e042d-44e4-46e3-82fb-6e9d18103625 became leader I0424 12:20:35.342052 1 simple_featuregate_reader.go:171] Starting feature-gate-detector I0424 12:20:35.345978 1 reflector.go:376] Caches populated for *v1.ClusterVersion from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.347133 1 reflector.go:376] Caches populated for *v1.FeatureGate from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.347512 1 reflector.go:376] Caches populated for *v1.Console from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.347844 1 reflector.go:376] Caches populated for *v1.APIServer from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.348176 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionCondition I0424 12:20:35.352609 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'FeatureGatesInitialized' FeatureGates updated to featuregates.Features{Enabled:[]v1.FeatureGateName{"AWSEFSDriverVolumeMetrics", "AdditionalRoutingCapabilities", "AdminNetworkPolicy", "AlibabaPlatform", "AzureWorkloadIdentity", "BareMetalLoadBalancer", "BuildCSIVolumes", "CPMSMachineNamePrefix", "ChunkSizeMiB", "CloudDualStackNodeIPs", "ConsolePluginContentSecurityPolicy", "DisableKubeletCloudCredentialProviders", "GCPLabelsTags", "GatewayAPI", "GatewayAPIController", "HardwareSpeed", "IngressControllerLBSubnetsAWS", "KMSv1", "MachineConfigNodes", "ManagedBootImages", "ManagedBootImagesAWS", "MetricsCollectionProfiles", "MultiArchInstallAWS", "MultiArchInstallGCP", "NetworkDiagnosticsConfig", "NetworkLiveMigration", "NetworkSegmentation", "NewOLM", "NodeDisruptionPolicy", "OnClusterBuild", "PersistentIPsForVirtualization", "PinnedImages", "PrivateHostedZoneAWS", "RouteAdvertisements", "RouteExternalCertificate", "ServiceAccountTokenNodeBinding", "SetEIPForNLBIngressController", "VSphereDriverConfiguration", "VSphereMultiVCenters", "ValidatingAdmissionPolicy"}, Disabled:[]v1.FeatureGateName{"AWSClusterHostedDNS", "AutomatedEtcdBackup", "BootcNodeManagement", "ClusterAPIInstall", "ClusterAPIInstallIBMCloud", "ClusterMonitoringConfig", "ClusterVersionOperatorConfiguration", "DNSNameResolver", "DualReplica", "DyanmicServiceEndpointIBMCloud", "DynamicResourceAllocation", "EtcdBackendQuota", "EventedPLEG", "Example", "Example2", "ExternalOIDC", "ExternalOIDCWithUIDAndExtraClaimMappings", "GCPClusterHostedDNS", "GCPCustomAPIEndpoints", "HighlyAvailableArbiter", "ImageStreamImportMode", "IngressControllerDynamicConfigurationManager", "InsightsConfig", "InsightsConfigAPI", "InsightsOnDemandDataGather", "InsightsRuntimeExtractor", "KMSEncryptionProvider", "MachineAPIMigration", "MachineAPIOperatorDisableMachineHealthCheckController", "MachineAPIProviderOpenStack", "MaxUnavailableStatefulSet", "MinimumKubeletVersion", "MixedCPUsAllocation", "MultiArchInstallAzure", "NewOLMCatalogdAPIV1Metas", "NewOLMOwnSingleNamespace", "NewOLMPreflightPermissionChecks", "NodeSwap", "NutanixMultiSubnets", "OVNObservability", "OpenShiftPodSecurityAdmission", "PlatformOperators", "ProcMountType", "SELinuxChangePolicy", "SELinuxMount", "ShortCertRotation", "SignatureStores", "SigstoreImageVerification", "SigstoreImageVerificationPKI", "StreamingCollectionEncodingToJSON", "StreamingCollectionEncodingToProtobuf", "TranslateStreamCloseWebsocketRequests", "UpgradeStatus", "UserNamespacesPodSecurityStandards", "UserNamespacesSupport", "VSphereConfigurableMaxAllowedBlockVolumesPerNode", "VSphereHostVMGroupZonal", "VSphereMultiDisk", "VSphereMultiNetworks", "VolumeAttributesClass", "VolumeGroupSnapshot"}} I0424 12:20:35.354361 1 reflector.go:376] Caches populated for *v1.Infrastructure from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.354873 1 reflector.go:376] Caches populated for *v1.Proxy from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.355368 1 base_controller.go:76] Waiting for caches to sync for LoggingSyncer I0424 12:20:35.355672 1 base_controller.go:76] Waiting for caches to sync for WellKnownReadyController I0424 12:20:35.355693 1 base_controller.go:76] Waiting for caches to sync for OAuthServerRouteEndpointAccessibleController I0424 12:20:35.355705 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0424 12:20:35.355718 1 base_controller.go:76] Waiting for caches to sync for OAuthServer-WorkloadWorkloadController I0424 12:20:35.355732 1 base_controller.go:76] Waiting for caches to sync for authentication-ManagementState I0424 12:20:35.355752 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-Metadata I0424 12:20:35.355758 1 base_controller.go:76] Waiting for caches to sync for OAuthClientsController I0424 12:20:35.355767 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-PayloadConfig I0424 12:20:35.360007 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-ServiceCA I0424 12:20:35.360287 1 base_controller.go:76] Waiting for caches to sync for APIServerStaticResources-StaticResources I0424 12:20:35.360303 1 base_controller.go:76] Waiting for caches to sync for StatusSyncer_authentication I0424 12:20:35.361039 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointsEndpointAccessibleController I0424 12:20:35.361048 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressNodesAvailable I0424 12:20:35.361053 1 base_controller.go:76] Waiting for caches to sync for ProxyConfigController I0424 12:20:35.361059 1 base_controller.go:76] Waiting for caches to sync for CustomRouteController I0424 12:20:35.361064 1 base_controller.go:76] Waiting for caches to sync for TrustDistributionController I0424 12:20:35.361073 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-RemoveStaleConditions I0424 12:20:35.361078 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-IngressState I0424 12:20:35.361082 1 base_controller.go:76] Waiting for caches to sync for ConfigObserver I0424 12:20:35.361102 1 base_controller.go:76] Waiting for caches to sync for OpenShiftAuthenticatorCertRequester I0424 12:20:35.361106 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorController I0424 12:20:35.361110 1 base_controller.go:76] Waiting for caches to sync for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0424 12:20:35.361115 1 base_controller.go:76] Waiting for caches to sync for auditPolicyController I0424 12:20:35.361121 1 base_controller.go:76] Waiting for caches to sync for openshift-apiserver-APIService I0424 12:20:35.361127 1 base_controller.go:76] Waiting for caches to sync for SecretRevisionPruneController I0424 12:20:35.361138 1 base_controller.go:76] Waiting for caches to sync for NamespaceFinalizerController_openshift-oauth-apiserver I0424 12:20:35.361142 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionKey I0424 12:20:35.361147 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionPrune I0424 12:20:35.361151 1 base_controller.go:76] Waiting for caches to sync for RevisionController I0424 12:20:35.361155 1 base_controller.go:76] Waiting for caches to sync for OAuthAPIServerController-WorkloadWorkloadController I0424 12:20:35.361160 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionState I0424 12:20:35.361178 1 base_controller.go:76] Waiting for caches to sync for openshift-oauth-apiserver-EncryptionMigration I0424 12:20:35.361183 1 base_controller.go:76] Waiting for caches to sync for OAuthServerServiceEndpointAccessibleController I0424 12:20:35.361187 1 base_controller.go:76] Waiting for caches to sync for RouterCertsDomainValidationController I0424 12:20:35.361192 1 base_controller.go:76] Waiting for caches to sync for oauth-server I0424 12:20:35.361196 1 base_controller.go:76] Waiting for caches to sync for openshift-authentication-UnsupportedConfigOverrides I0424 12:20:35.363724 1 base_controller.go:76] Waiting for caches to sync for OpenshiftAuthenticationStaticResources-StaticResources I0424 12:20:35.368069 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.370050 1 reflector.go:376] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.370675 1 reflector.go:376] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.372497 1 reflector.go:376] Caches populated for *v1.DaemonSet from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.373003 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.373299 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.374119 1 reflector.go:376] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.375692 1 reflector.go:376] Caches populated for *v1.RoleBinding from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.376801 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0424 12:20:35.381451 1 reflector.go:376] Caches populated for *v1.Role from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.385407 1 reflector.go:376] Caches populated for *v1.ClusterRoleBinding from k8s.io/client-go/informers/factory.go:160 W0424 12:20:35.386837 1 reflector.go:569] github.com/openshift/client-go/oauth/informers/externalversions/factory.go:125: failed to list *v1.OAuthClient: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io) E0424 12:20:35.386904 1 reflector.go:166] "Unhandled Error" err="github.com/openshift/client-go/oauth/informers/externalversions/factory.go:125: Failed to watch *v1.OAuthClient: failed to list *v1.OAuthClient: the server is currently unable to handle the request (get oauthclients.oauth.openshift.io)" I0424 12:20:35.387489 1 reflector.go:376] Caches populated for *v1.Deployment from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.388981 1 reflector.go:376] Caches populated for *v1.CertificateSigningRequest from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.391565 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.391885 1 reflector.go:376] Caches populated for *v1.Route from github.com/openshift/client-go/route/informers/externalversions/factory.go:125 I0424 12:20:35.398195 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 E0424 12:20:35.401872 1 reflector.go:166] "Unhandled Error" err="github.com/openshift/client-go/route/informers/externalversions/factory.go:125: Failed to watch *v1.Route: the server is currently unable to handle the request (get routes.route.openshift.io)" I0424 12:20:35.464129 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorCertApprover_OpenShiftAuthenticator I0424 12:20:35.464150 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorCertApprover_OpenShiftAuthenticator controller ... W0424 12:20:35.464267 1 dynamic_operator_client.go:355] .status.conditions["WebhookAuthenticatorCertApprover_OpenShiftAuthenticatorDegraded"].message is missing; this will eventually be fatal I0424 12:20:35.503187 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.548278 1 reflector.go:376] Caches populated for *v1.ClusterOperator from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.702720 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.720851 1 reflector.go:376] Caches populated for *v1.Ingress from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.757243 1 reflector.go:376] Caches populated for *v1.Authentication from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.761500 1 reflector.go:376] Caches populated for *v1alpha1.StorageVersionMigration from sigs.k8s.io/kube-storage-version-migrator/pkg/clients/informer/factory.go:132 I0424 12:20:35.762272 1 reflector.go:376] Caches populated for *v1.OAuth from github.com/openshift/client-go/config/informers/externalversions/factory.go:125 I0424 12:20:35.762859 1 base_controller.go:82] Caches are synced for openshift-authentication-ServiceCA I0424 12:20:35.762878 1 base_controller.go:119] Starting #1 worker of openshift-authentication-ServiceCA controller ... I0424 12:20:35.763047 1 base_controller.go:82] Caches are synced for openshift-authentication-Metadata I0424 12:20:35.763057 1 base_controller.go:119] Starting #1 worker of openshift-authentication-Metadata controller ... I0424 12:20:35.766167 1 reflector.go:376] Caches populated for operator.openshift.io/v1, Resource=authentications from k8s.io/client-go/dynamic/dynamicinformer/informer.go:108 W0424 12:20:35.766201 1 dynamic_operator_client.go:352] .status.conditions["AuthConfigDegraded"].reason is missing; this will eventually be fatal W0424 12:20:35.766386 1 dynamic_operator_client.go:355] .status.conditions["AuthConfigDegraded"].message is missing; this will eventually be fatal W0424 12:20:35.766408 1 dynamic_operator_client.go:352] .status.conditions["IngressConfigDegraded"].reason is missing; this will eventually be fatal W0424 12:20:35.766425 1 dynamic_operator_client.go:355] .status.conditions["IngressConfigDegraded"].message is missing; this will eventually be fatal W0424 12:20:35.766445 1 dynamic_operator_client.go:352] .status.conditions["OAuthSystemMetadataDegraded"].reason is missing; this will eventually be fatal W0424 12:20:35.766477 1 dynamic_operator_client.go:355] .status.conditions["OAuthSystemMetadataDegraded"].message is missing; this will eventually be fatal I0424 12:20:35.855687 1 base_controller.go:82] Caches are synced for LoggingSyncer I0424 12:20:35.855712 1 base_controller.go:119] Starting #1 worker of LoggingSyncer controller ... I0424 12:20:35.856539 1 base_controller.go:82] Caches are synced for authentication-ManagementState I0424 12:20:35.856600 1 base_controller.go:119] Starting #1 worker of authentication-ManagementState controller ... I0424 12:20:35.861713 1 base_controller.go:82] Caches are synced for openshift-authentication-PayloadConfig I0424 12:20:35.861780 1 base_controller.go:119] Starting #1 worker of openshift-authentication-PayloadConfig controller ... I0424 12:20:35.861902 1 base_controller.go:82] Caches are synced for openshift-authentication-RemoveStaleConditions I0424 12:20:35.861924 1 base_controller.go:119] Starting #1 worker of openshift-authentication-RemoveStaleConditions controller ... I0424 12:20:35.861948 1 base_controller.go:82] Caches are synced for APIServerStaticResources-StaticResources I0424 12:20:35.861966 1 base_controller.go:119] Starting #1 worker of APIServerStaticResources-StaticResources controller ... I0424 12:20:35.861990 1 base_controller.go:82] Caches are synced for StatusSyncer_authentication I0424 12:20:35.862007 1 base_controller.go:119] Starting #1 worker of StatusSyncer_authentication controller ... I0424 12:20:35.862032 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointsEndpointAccessibleController I0424 12:20:35.862049 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointsEndpointAccessibleController controller ... I0424 12:20:35.864473 1 base_controller.go:82] Caches are synced for OAuthServerServiceEndpointAccessibleController I0424 12:20:35.866572 1 base_controller.go:119] Starting #1 worker of OAuthServerServiceEndpointAccessibleController controller ... I0424 12:20:35.866090 1 base_controller.go:82] Caches are synced for openshift-authentication-UnsupportedConfigOverrides I0424 12:20:35.866642 1 base_controller.go:119] Starting #1 worker of openshift-authentication-UnsupportedConfigOverrides controller ... I0424 12:20:35.866544 1 base_controller.go:82] Caches are synced for OpenshiftAuthenticationStaticResources-StaticResources I0424 12:20:35.875097 1 base_controller.go:119] Starting #1 worker of OpenshiftAuthenticationStaticResources-StaticResources controller ... I0424 12:20:35.905627 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:35.962116 1 base_controller.go:82] Caches are synced for CustomRouteController I0424 12:20:35.962140 1 base_controller.go:119] Starting #1 worker of CustomRouteController controller ... I0424 12:20:36.127593 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:36.162562 1 base_controller.go:82] Caches are synced for OAuthServerRouteEndpointAccessibleController I0424 12:20:36.162588 1 base_controller.go:119] Starting #1 worker of OAuthServerRouteEndpointAccessibleController controller ... I0424 12:20:36.302417 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0424 12:20:36.485240 1 reflector.go:376] Caches populated for *v1.Route from github.com/openshift/client-go/route/informers/externalversions/factory.go:125 I0424 12:20:36.500881 1 request.go:729] Waited for 1.138535462s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/serviceaccounts?limit=500&resourceVersion=0 I0424 12:20:36.503092 1 reflector.go:376] Caches populated for *v1.ServiceAccount from k8s.io/client-go/informers/factory.go:160 I0424 12:20:36.703947 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:36.763060 1 base_controller.go:82] Caches are synced for auditPolicyController I0424 12:20:36.763083 1 base_controller.go:119] Starting #1 worker of auditPolicyController controller ... I0424 12:20:36.904732 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:36.962342 1 base_controller.go:82] Caches are synced for WebhookAuthenticatorController I0424 12:20:36.962368 1 base_controller.go:119] Starting #1 worker of WebhookAuthenticatorController controller ... I0424 12:20:36.962404 1 base_controller.go:82] Caches are synced for RevisionController I0424 12:20:36.962408 1 base_controller.go:119] Starting #1 worker of RevisionController controller ... I0424 12:20:36.964981 1 base_controller.go:82] Caches are synced for OpenShiftAuthenticatorCertRequester I0424 12:20:36.965000 1 base_controller.go:119] Starting #1 worker of OpenShiftAuthenticatorCertRequester controller ... I0424 12:20:37.103582 1 reflector.go:376] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0424 12:20:37.162982 1 base_controller.go:82] Caches are synced for NamespaceFinalizerController_openshift-oauth-apiserver I0424 12:20:37.163006 1 base_controller.go:119] Starting #1 worker of NamespaceFinalizerController_openshift-oauth-apiserver controller ... I0424 12:20:37.163039 1 base_controller.go:82] Caches are synced for SecretRevisionPruneController I0424 12:20:37.163043 1 base_controller.go:119] Starting #1 worker of SecretRevisionPruneController controller ... I0424 12:20:37.303128 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:20:37.501191 1 request.go:729] Waited for 2.138407115s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces?limit=500&resourceVersion=0 I0424 12:20:37.504060 1 reflector.go:376] Caches populated for *v1.Namespace from k8s.io/client-go/informers/factory.go:160 I0424 12:20:37.703371 1 reflector.go:376] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0424 12:20:37.904188 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:38.108010 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:38.155953 1 base_controller.go:82] Caches are synced for ConfigObserver I0424 12:20:38.155971 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0424 12:20:38.162093 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionKey I0424 12:20:38.162106 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionPrune I0424 12:20:38.162113 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionPrune controller ... I0424 12:20:38.162117 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionState I0424 12:20:38.162134 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionState controller ... I0424 12:20:38.162122 1 base_controller.go:82] Caches are synced for RouterCertsDomainValidationController I0424 12:20:38.162160 1 base_controller.go:119] Starting #1 worker of RouterCertsDomainValidationController controller ... I0424 12:20:38.162111 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionKey controller ... I0424 12:20:38.162149 1 base_controller.go:82] Caches are synced for TrustDistributionController I0424 12:20:38.162235 1 base_controller.go:119] Starting #1 worker of TrustDistributionController controller ... I0424 12:20:38.163828 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionCondition I0424 12:20:38.163858 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionCondition controller ... I0424 12:20:38.164911 1 base_controller.go:82] Caches are synced for openshift-oauth-apiserver-EncryptionMigration I0424 12:20:38.164926 1 base_controller.go:119] Starting #1 worker of openshift-oauth-apiserver-EncryptionMigration controller ... E0424 12:20:38.165872 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:20:38.302512 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0424 12:20:38.363730 1 base_controller.go:82] Caches are synced for WellKnownReadyController I0424 12:20:38.363752 1 base_controller.go:119] Starting #1 worker of WellKnownReadyController controller ... I0424 12:20:38.502989 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:38.700935 1 request.go:729] Waited for 3.337518413s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/configmaps?limit=500&resourceVersion=0 I0424 12:20:38.707221 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:38.762266 1 base_controller.go:82] Caches are synced for ProxyConfigController I0424 12:20:38.762351 1 base_controller.go:119] Starting #1 worker of ProxyConfigController controller ... I0424 12:20:38.902727 1 reflector.go:376] Caches populated for *v1.Endpoints from k8s.io/client-go/informers/factory.go:160 I0424 12:20:39.102886 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:39.162556 1 base_controller.go:82] Caches are synced for openshift-apiserver-APIService I0424 12:20:39.162575 1 base_controller.go:119] Starting #1 worker of openshift-apiserver-APIService controller ... I0424 12:20:39.306749 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:39.504246 1 reflector.go:376] Caches populated for *v1.Node from k8s.io/client-go/informers/factory.go:160 I0424 12:20:39.562872 1 base_controller.go:82] Caches are synced for OAuthAPIServerController-WorkloadWorkloadController I0424 12:20:39.562895 1 base_controller.go:119] Starting #1 worker of OAuthAPIServerController-WorkloadWorkloadController controller ... I0424 12:20:39.705033 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0424 12:20:39.762598 1 base_controller.go:82] Caches are synced for ConfigObserver I0424 12:20:39.762700 1 base_controller.go:119] Starting #1 worker of ConfigObserver controller ... I0424 12:20:39.900734 1 request.go:729] Waited for 4.537135305s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-etcd/secrets?limit=500&resourceVersion=0 I0424 12:20:39.906951 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0424 12:20:39.961999 1 base_controller.go:82] Caches are synced for oauth-server I0424 12:20:39.962024 1 base_controller.go:119] Starting #1 worker of oauth-server controller ... I0424 12:20:40.103397 1 reflector.go:376] Caches populated for *v1.Pod from k8s.io/client-go/informers/factory.go:160 I0424 12:20:40.156077 1 base_controller.go:82] Caches are synced for OAuthServer-WorkloadWorkloadController I0424 12:20:40.156095 1 base_controller.go:119] Starting #1 worker of OAuthServer-WorkloadWorkloadController controller ... I0424 12:20:40.162209 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressState I0424 12:20:40.162227 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressState controller ... I0424 12:20:41.101081 1 request.go:729] Waited for 4.337188988s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit I0424 12:20:41.520186 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"CustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:20:41.858617 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:20:41.871543 1 reflector.go:376] Caches populated for *v1.IngressController from github.com/openshift/client-go/operator/informers/externalversions/factory.go:125 I0424 12:20:41.871853 1 reflector.go:376] Caches populated for *v1.OAuthClient from github.com/openshift/client-go/oauth/informers/externalversions/factory.go:125 I0424 12:20:41.976095 1 base_controller.go:82] Caches are synced for OAuthClientsController I0424 12:20:41.976162 1 base_controller.go:119] Starting #1 worker of OAuthClientsController controller ... I0424 12:20:41.976209 1 base_controller.go:82] Caches are synced for openshift-authentication-IngressNodesAvailable I0424 12:20:41.976226 1 base_controller.go:119] Starting #1 worker of openshift-authentication-IngressNodesAvailable controller ... I0424 12:20:42.030773 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "CustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:20:42.102409 1 request.go:729] Waited for 3.939856446s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs E0424 12:20:42.349142 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused" I0424 12:20:42.365966 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"CustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:20:42.576715 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" I0424 12:20:43.300594 1 request.go:729] Waited for 1.799208541s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit E0424 12:20:43.461225 1 base_controller.go:279] "Unhandled Error" err="StatusSyncer_authentication reconciliation failed: Operation cannot be fulfilled on clusteroperators.config.openshift.io \"authentication\": the object has been modified; please apply your changes to the latest version and try again" I0424 12:20:43.536700 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:43Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:20:43.537472 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused" I0424 12:20:43.870876 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:43Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable::OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:43.871255 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "CustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)",Available changed from True to False ("OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)") I0424 12:20:44.116798 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Available message changed from "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" to "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:20:44.118773 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" I0424 12:20:44.119692 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:43Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable::OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} W0424 12:20:44.127194 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointAccessibleControllerAvailable"].message is missing; this will eventually be fatal W0424 12:20:44.379625 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:20:44.501186 1 request.go:729] Waited for 1.040390319s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system E0424 12:20:44.626203 1 base_controller.go:279] "Unhandled Error" err="StatusSyncer_authentication reconciliation failed: Operation cannot be fulfilled on clusteroperators.config.openshift.io \"authentication\": the object has been modified; please apply your changes to the latest version and try again" I0424 12:20:44.634378 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:43Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:44.927314 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:43Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:44.927582 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)",Available message changed from "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" to "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" I0424 12:20:45.501365 1 request.go:729] Waited for 1.630074834s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events E0424 12:20:45.618986 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: routes.route.openshift.io \"oauth-openshift\" is forbidden: User \"system:anonymous\" cannot get resource \"routes\" in API group \"route.openshift.io\" in the namespace \"openshift-authentication\"" E0424 12:20:45.745210 1 base_controller.go:279] "Unhandled Error" err="StatusSyncer_authentication reconciliation failed: Operation cannot be fulfilled on clusteroperators.config.openshift.io \"authentication\": the object has been modified; please apply your changes to the latest version and try again" I0424 12:20:45.752783 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: routes.route.openshift.io \"oauth-openshift\" is forbidden: User \"system:anonymous\" cannot get resource \"routes\" in API group \"route.openshift.io\" in the namespace \"openshift-authentication\"","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:43Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:45.962470 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: routes.route.openshift.io \"oauth-openshift\" is forbidden: User \"system:anonymous\" cannot get resource \"routes\" in API group \"route.openshift.io\" in the namespace \"openshift-authentication\"" W0424 12:20:46.056857 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerRouteEndpointAccessibleControllerAvailable"].message is missing; this will eventually be fatal W0424 12:20:46.258325 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerRouteEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:20:46.298646 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: routes.route.openshift.io \"oauth-openshift\" is forbidden: User \"system:anonymous\" cannot get resource \"routes\" in API group \"route.openshift.io\" in the namespace \"openshift-authentication\"","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:46Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:46.511390 1 request.go:729] Waited for 1.35134002s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session W0424 12:20:46.539950 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:20:46.548909 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Available changed from False to True ("All is well") W0424 12:20:46.557611 1 dynamic_operator_client.go:355] .status.conditions["CustomRouteControllerDegraded"].message is missing; this will eventually be fatal I0424 12:20:46.575931 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: routes.route.openshift.io \"oauth-openshift\" is forbidden: User \"system:anonymous\" cannot get resource \"routes\" in API group \"route.openshift.io\" in the namespace \"openshift-authentication\"","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:46Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:20:47.369747 1 base_controller.go:279] "Unhandled Error" err="StatusSyncer_authentication reconciliation failed: Operation cannot be fulfilled on clusteroperators.config.openshift.io \"authentication\": the object has been modified; please apply your changes to the latest version and try again" I0424 12:20:47.374058 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:46Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:47.702495 1 request.go:729] Waited for 1.448007507s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0424 12:20:47.898017 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)\nCustomRouteControllerDegraded: routes.route.openshift.io \"oauth-openshift\" is forbidden: User \"system:anonymous\" cannot get resource \"routes\" in API group \"route.openshift.io\" in the namespace \"openshift-authentication\"" to "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused" W0424 12:20:48.168511 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:20:48.300827 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:46Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:20:48.541015 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: Get \"https://10.129.0.67:6443/healthz\": dial tcp 10.129.0.67:6443: connect: connection refused" to "All is well" I0424 12:20:48.901012 1 request.go:729] Waited for 1.267595407s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system I0424 12:20:49.903725 1 request.go:729] Waited for 1.618737299s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:20:51.102375 1 request.go:729] Waited for 1.708434944s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle I0424 12:20:52.300488 1 request.go:729] Waited for 1.392641404s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-7b745568db-99rm4 I0424 12:20:53.300603 1 request.go:729] Waited for 1.710811678s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system I0424 12:20:54.300844 1 request.go:729] Waited for 1.806861811s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:20:55.303703 1 request.go:729] Waited for 1.324665336s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events I0424 12:20:56.501611 1 request.go:729] Waited for 1.10037555s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle E0424 12:21:00.244208 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:00.340859 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:20:46Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:00.419752 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:00.423637 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:00.436242 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:00.483173 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:00.566819 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:00.730771 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:00.760513 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready" W0424 12:21:00.762186 1 dynamic_operator_client.go:352] .status.conditions["IngressStatePodsDegraded"].reason is missing; this will eventually be fatal W0424 12:21:00.762249 1 dynamic_operator_client.go:355] .status.conditions["IngressStatePodsDegraded"].message is missing; this will eventually be fatal I0424 12:21:00.793762 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:00.797321 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:01.056011 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:01.090226 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Available changed from True to False ("OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused") I0424 12:21:01.500636 1 request.go:729] Waited for 1.127546201s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication E0424 12:21:01.505934 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" I0424 12:21:01.610749 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:01.616572 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:01.765894 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready" to "OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready" I0424 12:21:01.883422 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:01.893329 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:02.205454 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:02.220607 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:02.220859 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready" to "OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'" E0424 12:21:02.221071 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:02.225790 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:02.236352 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:02.285316 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:02.339674 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:02.375788 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:02.452208 1 base_controller.go:279] "Unhandled Error" err="StatusSyncer_authentication reconciliation failed: Operation cannot be fulfilled on clusteroperators.config.openshift.io \"authentication\": the object has been modified; please apply your changes to the latest version and try again" I0424 12:21:02.500826 1 request.go:729] Waited for 1.136408796s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets/kubeadmin E0424 12:21:02.541272 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" W0424 12:21:02.581667 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:21:02.581689 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:21:02.581694 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:21:02.581699 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal E0424 12:21:02.798452 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:02.799500 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:02.812984 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:02.868715 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" I0424 12:21:03.081426 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'" E0424 12:21:03.372973 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:03.501624 1 request.go:729] Waited for 1.635417516s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift E0424 12:21:04.159121 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" I0424 12:21:04.701347 1 request.go:729] Waited for 1.610857537s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit W0424 12:21:04.906299 1 dynamic_operator_client.go:352] .status.conditions["IngressStatePodsDegraded"].reason is missing; this will eventually be fatal W0424 12:21:04.906321 1 dynamic_operator_client.go:355] .status.conditions["IngressStatePodsDegraded"].message is missing; this will eventually be fatal I0424 12:21:05.900761 1 request.go:729] Waited for 1.676642742s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:21:06.525487 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:06.532808 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:06.538795 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" I0424 12:21:06.608897 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 1 endpoints for oauth-server are reporting 'not ready'" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'" E0424 12:21:06.725026 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:06.849718 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" I0424 12:21:06.861385 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable::OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:06.867954 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" I0424 12:21:06.902701 1 request.go:729] Waited for 1.17402463s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events W0424 12:21:06.907035 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:21:06.907134 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:21:06.907158 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:21:06.931510 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Available message changed from "OAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" to "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:06.934569 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:07.042174 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:07.125136 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable::OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:07.127485 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:07.132666 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:07.150603 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:07.163125 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:07.183506 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:07.215832 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:07.386408 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:07.424833 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:07.440096 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerDeployment_NoPod::OAuthServerRouteEndpointAccessibleController_EndpointUnavailable::OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:07.443619 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointsEndpointAccessibleController reconciliation failed: oauth service endpoints are not ready" E0424 12:21:07.448712 1 base_controller.go:279] "Unhandled Error" err="OAuthServerServiceEndpointAccessibleController reconciliation failed: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:07.469590 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:07.482307 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF",Available message changed from "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" to "OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" E0424 12:21:07.725679 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:08.109041 1 request.go:729] Waited for 1.265093279s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit E0424 12:21:09.023748 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:09.300549 1 request.go:729] Waited for 1.946597067s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/openshift-authenticator-certs W0424 12:21:09.416679 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointsEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:21:09.855556 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused","reason":"OAuthServerDeployment_NoPod::OAuthServerRouteEndpointAccessibleController_EndpointUnavailable::OAuthServerServiceEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} W0424 12:21:09.871835 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointAccessibleControllerAvailable"].message is missing; this will eventually be fatal E0424 12:21:09.875549 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:09.891067 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nOAuthServerServiceEndpointsEndpointAccessibleControllerDegraded: oauth service endpoints are not ready\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" W0424 12:21:10.296547 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:21:10.300931 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"OAuthServerDeployment_NoPod::OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:10.301111 1 request.go:729] Waited for 1.785677542s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events E0424 12:21:10.313967 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:10.355384 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Available message changed from "OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nOAuthServerServiceEndpointAccessibleControllerAvailable: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused" to "OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" W0424 12:21:10.373089 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerServiceEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:21:10.531778 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"OAuthServerDeployment_NoPod::OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:10.550373 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:10.721653 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:10.757856 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:10.800064 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:10.884455 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerServiceEndpointAccessibleControllerDegraded: Get \"https://172.30.217.212:443/healthz\": dial tcp 172.30.217.212:443: connect: connection refused\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:10.895365 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"OAuthServerDeployment_NoPod::OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:10.907330 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:10.935101 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" W0424 12:21:10.971093 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:21:10.971178 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:21:10.971200 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:21:10.971218 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal E0424 12:21:11.045059 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:11.067776 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:11.072507 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:11.086551 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} E0424 12:21:11.092356 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:11.102285 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:11.107578 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 3 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod, container is waiting in oauth-openshift-7b745568db-99rm4 pod, container is not ready in oauth-openshift-7b745568db-gg5gl pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)",Available message changed from "OAuthServerDeploymentAvailable: no oauth-openshift.openshift-authentication pods available on any node.\nOAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" to "OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:11.137123 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:11.221782 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:11.386652 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:11.442120 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" E0424 12:21:11.448280 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" I0424 12:21:11.500755 1 request.go:729] Waited for 1.78937006s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs E0424 12:21:11.670488 1 base_controller.go:279] "Unhandled Error" err="OAuthServerRouteEndpointAccessibleController reconciliation failed: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF" E0424 12:21:11.722221 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:12.701123 1 request.go:729] Waited for 1.996945272s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca E0424 12:21:13.016179 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:13.900756 1 request.go:729] Waited for 2.335719307s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-router-certs I0424 12:21:15.100318 1 request.go:729] Waited for 2.382552298s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca E0424 12:21:15.581701 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" W0424 12:21:15.705832 1 dynamic_operator_client.go:352] .status.conditions["IngressStateEndpointsDegraded"].reason is missing; this will eventually be fatal W0424 12:21:15.705868 1 dynamic_operator_client.go:355] .status.conditions["IngressStateEndpointsDegraded"].message is missing; this will eventually be fatal W0424 12:21:15.705874 1 dynamic_operator_client.go:352] .status.conditions["IngressStatePodsDegraded"].reason is missing; this will eventually be fatal W0424 12:21:15.705878 1 dynamic_operator_client.go:355] .status.conditions["IngressStatePodsDegraded"].message is missing; this will eventually be fatal I0424 12:21:15.795690 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:00Z","message":"OAuthServerRouteEndpointAccessibleControllerAvailable: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF","reason":"OAuthServerRouteEndpointAccessibleController_EndpointUnavailable","status":"False","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} W0424 12:21:15.820639 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerRouteEndpointAccessibleControllerAvailable"].message is missing; this will eventually be fatal E0424 12:21:15.868109 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" W0424 12:21:15.870019 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerRouteEndpointAccessibleControllerDegraded"].message is missing; this will eventually be fatal I0424 12:21:15.955450 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nIngressStateEndpointsDegraded: All 2 endpoints for oauth-server are reporting 'not ready'\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:15.962629 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} W0424 12:21:15.972099 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:21:15.972180 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:21:15.972210 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:21:15.972227 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:21:15.996569 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Available changed from False to True ("All is well") E0424 12:21:16.027351 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:16.061045 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:16.084516 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nOAuthServerRouteEndpointAccessibleControllerDegraded: Get \"https://oauth-openshift.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com/healthz\": EOF\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:16.100695 1 request.go:729] Waited for 2.217544316s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver E0424 12:21:16.130459 1 base_controller.go:279] "Unhandled Error" err="CustomRouteController reconciliation failed: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:16.188114 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:16.221128 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 2 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is waiting in apiserver-5f755877d6-qwd88 pod, container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:17.300411 1 request.go:729] Waited for 1.966231351s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/configmaps/oauth-serving-cert I0424 12:21:18.300882 1 request.go:729] Waited for 2.234749013s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0424 12:21:19.500655 1 request.go:729] Waited for 2.28062169s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session W0424 12:21:19.923976 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:21:19.923994 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:21:19.923997 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:21:19.924002 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:21:19.924006 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:21:20.089304 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:20.100657 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nOAuthServerDeploymentDegraded: 1 of 3 requested instances are unavailable for oauth-openshift.openshift-authentication (container is not ready in oauth-openshift-7b745568db-jfzg5 pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" I0424 12:21:20.500662 1 request.go:729] Waited for 2.183090776s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/audit W0424 12:21:20.731517 1 dynamic_operator_client.go:355] .status.conditions["CustomRouteControllerDegraded"].message is missing; this will eventually be fatal I0424 12:21:20.810628 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:20.935129 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)\nCustomRouteControllerDegraded: the server is currently unable to handle the request (get routes.route.openshift.io oauth-openshift)" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)" I0424 12:21:21.700874 1 request.go:729] Waited for 2.195172663s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig W0424 12:21:22.578249 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:21:22.578267 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:21:22.578270 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:21:22.578274 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:21:22.578293 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:21:22.648875 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"AuthenticatorCertKeyProgressing: All is well","reason":"AsExpected","status":"False","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:21:22.664999 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver (container is not ready in apiserver-5f755877d6-zbrzp pod)" to "All is well" I0424 12:21:22.900562 1 request.go:729] Waited for 1.734308528s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/serviceaccounts/oauth-openshift I0424 12:21:24.100353 1 request.go:729] Waited for 1.93507947s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-7b745568db-jfzg5 I0424 12:21:25.101276 1 request.go:729] Waited for 1.977565035s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/openshift-authenticator-certs I0424 12:21:26.301091 1 request.go:729] Waited for 2.182991596s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift I0424 12:21:27.500347 1 request.go:729] Waited for 2.187871909s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets/kubeadmin I0424 12:21:28.501032 1 request.go:729] Waited for 2.192522793s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/pods/oauth-openshift-7b745568db-99rm4 I0424 12:21:29.700360 1 request.go:729] Waited for 1.793925251s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:21:30.701032 1 request.go:729] Waited for 1.596178465s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/openshift-authenticator-certs I0424 12:21:32.300324 1 request.go:729] Waited for 1.155676957s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication I0424 12:23:00.530634 1 apps.go:155] Deployment "openshift-authentication/oauth-openshift" changes: {"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"zHZtd1hXeMC5GCfaQZt4T6USwPL2L_xvagJq5tgIB2dx_xhRdp6dnRhEp-NHXNRZ121p3MdnTcdRC0dorPYS4g","operator.openshift.io/spec-hash":"295fdf14e1a077b5e9d71cbae7fda013dda9106e3531d535307e986fad1f55d7"}},"spec":{"progressDeadlineSeconds":null,"revisionHistoryLimit":null,"template":{"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"zHZtd1hXeMC5GCfaQZt4T6USwPL2L_xvagJq5tgIB2dx_xhRdp6dnRhEp-NHXNRZ121p3MdnTcdRC0dorPYS4g"}},"spec":{"containers":[{"args":["if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n"],"command":["/bin/bash","-ec"],"image":"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:523edd890b2948d9921987f90f4076db686d70261c9f12164ec9e5733f064ec5","lifecycle":{"preStop":{"exec":{"command":["sleep","25"]}}},"livenessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"initialDelaySeconds":30,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"name":"oauth-openshift","ports":[{"containerPort":6443,"name":"https","protocol":"TCP"}],"readinessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"resources":{"requests":{"cpu":"10m","memory":"50Mi"}},"securityContext":{"privileged":true,"readOnlyRootFilesystem":false,"runAsUser":0},"terminationMessagePolicy":"FallbackToLogsOnError","volumeMounts":[{"mountPath":"/var/run/configmaps/audit","name":"audit-policies"},{"mountPath":"/var/log/oauth-server","name":"audit-dir"},{"mountPath":"/var/config/system/secrets/v4-0-config-system-session","name":"v4-0-config-system-session","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-cliconfig","name":"v4-0-config-system-cliconfig","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-serving-cert","name":"v4-0-config-system-serving-cert","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-service-ca","name":"v4-0-config-system-service-ca","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-router-certs","name":"v4-0-config-system-router-certs","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-ocp-branding-template","name":"v4-0-config-system-ocp-branding-template","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-login","name":"v4-0-config-user-template-login","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-provider-selection","name":"v4-0-config-user-template-provider-selection","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-error","name":"v4-0-config-user-template-error","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle","name":"v4-0-config-system-trusted-ca-bundle","readOnly":true}]}],"dnsPolicy":null,"restartPolicy":null,"schedulerName":null,"securityContext":null,"serviceAccount":null,"volumes":[{"configMap":{"name":"audit"},"name":"audit-policies"},{"hostPath":{"path":"/var/log/oauth-server"},"name":"audit-dir"},{"name":"v4-0-config-system-session","secret":{"secretName":"v4-0-config-system-session"}},{"configMap":{"name":"v4-0-config-system-cliconfig"},"name":"v4-0-config-system-cliconfig"},{"name":"v4-0-config-system-serving-cert","secret":{"secretName":"v4-0-config-system-serving-cert"}},{"configMap":{"name":"v4-0-config-system-service-ca"},"name":"v4-0-config-system-service-ca"},{"name":"v4-0-config-system-router-certs","secret":{"secretName":"v4-0-config-system-router-certs"}},{"name":"v4-0-config-system-ocp-branding-template","secret":{"secretName":"v4-0-config-system-ocp-branding-template"}},{"name":"v4-0-config-user-template-login","secret":{"optional":true,"secretName":"v4-0-config-user-template-login"}},{"name":"v4-0-config-user-template-provider-selection","secret":{"optional":true,"secretName":"v4-0-config-user-template-provider-selection"}},{"name":"v4-0-config-user-template-error","secret":{"optional":true,"secretName":"v4-0-config-user-template-error"}},{"configMap":{"name":"v4-0-config-system-trusted-ca-bundle","optional":true},"name":"v4-0-config-system-trusted-ca-bundle"}]}}}} W0424 12:23:00.549422 1 warnings.go:70] spec.template.spec.nodeSelector[node-role.kubernetes.io/master]: use "node-role.kubernetes.io/control-plane" instead I0424 12:23:00.550747 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentUpdated' Updated Deployment.apps/oauth-openshift -n openshift-authentication because it changed W0424 12:23:00.552145 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:23:00.552159 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:23:00.552165 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:23:00.552171 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:23:00.651158 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 4, desired generation is 5.","reason":"OAuthServerDeployment_NewGeneration","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:23:00.713032 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing changed from False to True ("OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 4, desired generation is 5.") I0424 12:23:01.912769 1 request.go:729] Waited for 1.133486635s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0424 12:23:03.112856 1 request.go:729] Waited for 1.164275783s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:23:05.112816 1 request.go:729] Waited for 1.007468052s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/etcd-client I0424 12:23:05.941742 1 apps.go:155] Deployment "openshift-authentication/oauth-openshift" changes: {"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"HyujERry2YrNlTsW5Q3lVp4MtKWx71MDvdmXrrqyxY3vPtdSzhE1vZYn_eYfllLTpa276NmWnpaIf8kd2xMcDg","operator.openshift.io/spec-hash":"9bf56a02e960617c67374baebb2c8971b91bed8a505cd3061d0875e328454b83"}},"spec":{"progressDeadlineSeconds":null,"revisionHistoryLimit":null,"template":{"metadata":{"annotations":{"operator.openshift.io/rvs-hash":"HyujERry2YrNlTsW5Q3lVp4MtKWx71MDvdmXrrqyxY3vPtdSzhE1vZYn_eYfllLTpa276NmWnpaIf8kd2xMcDg"}},"spec":{"containers":[{"args":["if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n"],"command":["/bin/bash","-ec"],"image":"quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:523edd890b2948d9921987f90f4076db686d70261c9f12164ec9e5733f064ec5","lifecycle":{"preStop":{"exec":{"command":["sleep","25"]}}},"livenessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"initialDelaySeconds":30,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"name":"oauth-openshift","ports":[{"containerPort":6443,"name":"https","protocol":"TCP"}],"readinessProbe":{"failureThreshold":3,"httpGet":{"path":"/healthz","port":6443,"scheme":"HTTPS"},"periodSeconds":10,"successThreshold":1,"timeoutSeconds":1},"resources":{"requests":{"cpu":"10m","memory":"50Mi"}},"securityContext":{"privileged":true,"readOnlyRootFilesystem":false,"runAsUser":0},"terminationMessagePolicy":"FallbackToLogsOnError","volumeMounts":[{"mountPath":"/var/run/configmaps/audit","name":"audit-policies"},{"mountPath":"/var/log/oauth-server","name":"audit-dir"},{"mountPath":"/var/config/system/secrets/v4-0-config-system-session","name":"v4-0-config-system-session","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-cliconfig","name":"v4-0-config-system-cliconfig","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-serving-cert","name":"v4-0-config-system-serving-cert","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-service-ca","name":"v4-0-config-system-service-ca","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-router-certs","name":"v4-0-config-system-router-certs","readOnly":true},{"mountPath":"/var/config/system/secrets/v4-0-config-system-ocp-branding-template","name":"v4-0-config-system-ocp-branding-template","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-login","name":"v4-0-config-user-template-login","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-provider-selection","name":"v4-0-config-user-template-provider-selection","readOnly":true},{"mountPath":"/var/config/user/template/secret/v4-0-config-user-template-error","name":"v4-0-config-user-template-error","readOnly":true},{"mountPath":"/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle","name":"v4-0-config-system-trusted-ca-bundle","readOnly":true}]}],"dnsPolicy":null,"restartPolicy":null,"schedulerName":null,"securityContext":null,"serviceAccount":null,"volumes":[{"configMap":{"name":"audit"},"name":"audit-policies"},{"hostPath":{"path":"/var/log/oauth-server"},"name":"audit-dir"},{"name":"v4-0-config-system-session","secret":{"secretName":"v4-0-config-system-session"}},{"configMap":{"name":"v4-0-config-system-cliconfig"},"name":"v4-0-config-system-cliconfig"},{"name":"v4-0-config-system-serving-cert","secret":{"secretName":"v4-0-config-system-serving-cert"}},{"configMap":{"name":"v4-0-config-system-service-ca"},"name":"v4-0-config-system-service-ca"},{"name":"v4-0-config-system-router-certs","secret":{"secretName":"v4-0-config-system-router-certs"}},{"name":"v4-0-config-system-ocp-branding-template","secret":{"secretName":"v4-0-config-system-ocp-branding-template"}},{"name":"v4-0-config-user-template-login","secret":{"optional":true,"secretName":"v4-0-config-user-template-login"}},{"name":"v4-0-config-user-template-provider-selection","secret":{"optional":true,"secretName":"v4-0-config-user-template-provider-selection"}},{"name":"v4-0-config-user-template-error","secret":{"optional":true,"secretName":"v4-0-config-user-template-error"}},{"configMap":{"name":"v4-0-config-system-trusted-ca-bundle","optional":true},"name":"v4-0-config-system-trusted-ca-bundle"}]}}}} W0424 12:23:05.956321 1 warnings.go:70] spec.template.spec.nodeSelector[node-role.kubernetes.io/master]: use "node-role.kubernetes.io/control-plane" instead I0424 12:23:05.956815 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentUpdated' Updated Deployment.apps/oauth-openshift -n openshift-authentication because it changed W0424 12:23:05.959147 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:23:05.959161 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:23:05.959166 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:23:05.959172 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:23:06.047656 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 5, desired generation is 6.","reason":"OAuthServerDeployment_NewGeneration","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:23:06.082427 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 4, desired generation is 5." to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 5, desired generation is 6." I0424 12:23:07.112254 1 request.go:729] Waited for 1.068533633s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver I0424 12:23:08.112667 1 request.go:729] Waited for 1.982135396s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle I0424 12:23:09.113068 1 request.go:729] Waited for 1.593145692s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system W0424 12:23:09.125345 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:23:09.125361 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:23:09.125366 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:23:09.125368 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:23:09.176196 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 1/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:23:09.194404 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: observed generation is 5, desired generation is 6." to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 1/3 pods have been updated to the latest generation and 2/3 pods are available" I0424 12:23:10.312877 1 request.go:729] Waited for 1.14282764s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs I0424 12:23:11.512802 1 request.go:729] Waited for 1.777182711s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/services/oauth-openshift I0424 12:23:12.712320 1 request.go:729] Waited for 1.391501745s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/trusted-ca-bundle W0424 12:23:34.957610 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:23:34.957688 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerDeploymentDegraded"].message is missing; this will eventually be fatal W0424 12:23:34.957710 1 dynamic_operator_client.go:352] .status.conditions["OAuthServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:23:34.957728 1 dynamic_operator_client.go:355] .status.conditions["OAuthServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:23:35.125060 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"All is well","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:23:35.168799 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Progressing message changed from "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 1/3 pods have been updated to the latest generation and 2/3 pods are available" to "OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available" I0424 12:23:36.257361 1 request.go:729] Waited for 1.091028302s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session I0424 12:23:37.456918 1 request.go:729] Waited for 1.794212888s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system I0424 12:23:38.656989 1 request.go:729] Waited for 1.828148527s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-metadata I0424 12:23:39.856657 1 request.go:729] Waited for 1.981503776s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig I0424 12:23:40.856663 1 request.go:729] Waited for 1.196737645s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/configmaps/etcd-serving-ca W0424 12:24:30.200266 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentAvailable"].message is missing; this will eventually be fatal W0424 12:24:30.200358 1 dynamic_operator_client.go:355] .status.conditions["APIServerDeploymentProgressing"].message is missing; this will eventually be fatal W0424 12:24:30.200378 1 dynamic_operator_client.go:352] .status.conditions["APIServerWorkloadDegraded"].reason is missing; this will eventually be fatal W0424 12:24:30.200394 1 dynamic_operator_client.go:355] .status.conditions["APIServerWorkloadDegraded"].message is missing; this will eventually be fatal I0424 12:24:30.278858 1 status_controller.go:229] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2026-04-24T11:32:15Z","message":"APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2026-04-24T12:23:00Z","message":"OAuthServerDeploymentProgressing: deployment/oauth-openshift.openshift-authentication: 2/3 pods have been updated to the latest generation and 2/3 pods are available","reason":"OAuthServerDeployment_PodsUpdating","status":"True","type":"Progressing"},{"lastTransitionTime":"2026-04-24T12:21:15Z","message":"All is well","reason":"AsExpected","status":"True","type":"Available"},{"lastTransitionTime":"2026-04-24T11:08:53Z","message":"All is well","reason":"AsExpected","status":"True","type":"Upgradeable"},{"lastTransitionTime":"2026-04-24T11:08:52Z","reason":"NoData","status":"Unknown","type":"EvaluationConditionsDetected"}]}} I0424 12:24:30.318461 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"", APIVersion:"", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "All is well" to "APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()" I0424 12:24:31.359755 1 request.go:729] Waited for 1.041278208s due to client-side throttling, not priority and fairness, request: POST:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication-operator/events I0424 12:24:31.884311 1 observer_polling.go:120] Observed file "/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt" has been modified (old="00411c197b16f659945fba3c2f970a26030f56eef5d445c913cb59a089c813b9", new="2b4c201dbe5b9d8ff8c024f677c91ce65641e54bec42378c5b79ce5314697dca") I0424 12:24:31.884349 1 cmd.go:173] exiting because "/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt" changed I0424 12:24:31.884618 1 base_controller.go:181] Shutting down ConfigObserver ... I0424 12:24:31.884641 1 genericapiserver.go:693] "[graceful-termination] pre-shutdown hooks completed" name="PreShutdownHooksStopped" I0424 12:24:31.884663 1 genericapiserver.go:548] "[graceful-termination] shutdown event" name="ShutdownInitiated" I0424 12:24:31.884669 1 genericapiserver.go:551] "[graceful-termination] shutdown event" name="AfterShutdownDelayDuration" I0424 12:24:31.884682 1 genericapiserver.go:617] "[graceful-termination] shutdown event" name="NotAcceptingNewRequest" I0424 12:24:31.884754 1 base_controller.go:181] Shutting down SecretRevisionPruneController ... I0424 12:24:31.884801 1 observer_polling.go:162] Shutting down file observer I0424 12:24:31.884848 1 base_controller.go:181] Shutting down openshift-authentication-ServiceCA ... I0424 12:24:31.884966 1 simple_featuregate_reader.go:177] Shutting down feature-gate-detector I0424 12:24:31.898710 1 base_controller.go:181] Shutting down openshift-authentication-IngressNodesAvailable ... I0424 12:24:31.898769 1 base_controller.go:181] Shutting down OAuthClientsController ... I0424 12:24:31.898787 1 base_controller.go:181] Shutting down openshift-authentication-IngressState ... I0424 12:24:31.898797 1 base_controller.go:181] Shutting down OAuthServer-WorkloadWorkloadController ... I0424 12:24:31.898807 1 base_controller.go:181] Shutting down oauth-server ... I0424 12:24:31.898819 1 base_controller.go:181] Shutting down ConfigObserver ... I0424 12:24:31.898832 1 base_controller.go:181] Shutting down OAuthAPIServerController-WorkloadWorkloadController ... W0424 12:24:31.911490 1 dynamic_operator_client.go:352] .status.conditions["OAuthServiceDegraded"].reason is missing; this will eventually be fatal W0424 12:24:31.911558 1 dynamic_operator_client.go:355] .status.conditions["OAuthServiceDegraded"].message is missing; this will eventually be fatal E0424 12:24:31.918654 1 base_controller.go:279] "Unhandled Error" err="openshift-authentication-ServiceCA reconciliation failed: unable to ApplyStatus for operator using fieldManager \"openshift-authentication-ServiceCA\": client rate limiter Wait returned an error: context canceled" I0424 12:24:31.918715 1 base_controller.go:181] Shutting down NamespaceFinalizerController_openshift-oauth-apiserver ... I0424 12:24:31.918746 1 base_controller.go:181] Shutting down OpenShiftAuthenticatorCertRequester ... I0424 12:24:31.918775 1 base_controller.go:181] Shutting down RevisionController ... I0424 12:24:31.918790 1 base_controller.go:181] Shutting down WebhookAuthenticatorController ... I0424 12:24:31.918846 1 base_controller.go:181] Shutting down auditPolicyController ... I0424 12:24:31.918869 1 base_controller.go:181] Shutting down OAuthServerRouteEndpointAccessibleController ... I0424 12:24:31.918885 1 base_controller.go:181] Shutting down CustomRouteController ... I0424 12:24:31.918897 1 base_controller.go:181] Shutting down OpenshiftAuthenticationStaticResources-StaticResources ... I0424 12:24:31.929694 1 base_controller.go:123] Shutting down worker of openshift-authentication-ServiceCA controller ... I0424 12:24:31.930207 1 base_controller.go:113] All openshift-authentication-ServiceCA workers have been terminated I0424 12:24:31.929782 1 base_controller.go:181] Shutting down WebhookAuthenticatorCertApprover_OpenShiftAuthenticator ... I0424 12:24:31.929897 1 base_controller.go:123] Shutting down worker of SecretRevisionPruneController controller ... I0424 12:24:31.930226 1 base_controller.go:113] All SecretRevisionPruneController workers have been terminated I0424 12:24:31.930005 1 base_controller.go:123] Shutting down worker of WebhookAuthenticatorCertApprover_OpenShiftAuthenticator controller ... I0424 12:24:31.930237 1 base_controller.go:113] All WebhookAuthenticatorCertApprover_OpenShiftAuthenticator workers have been terminated I0424 12:24:31.930351 1 base_controller.go:181] Shutting down openshift-authentication-UnsupportedConfigOverrides ... I0424 12:24:31.930364 1 base_controller.go:181] Shutting down OAuthServerServiceEndpointAccessibleController ... I0424 12:24:31.930381 1 base_controller.go:181] Shutting down OAuthServerServiceEndpointsEndpointAccessibleController ... I0424 12:24:31.930395 1 base_controller.go:181] Shutting down StatusSyncer_authentication ... I0424 12:24:31.930400 1 base_controller.go:159] All StatusSyncer_authentication post start hooks have been terminated I0424 12:24:31.930517 1 base_controller.go:181] Shutting down APIServerStaticResources-StaticResources ... I0424 12:24:31.940509 1 base_controller.go:181] Shutting down openshift-authentication-Metadata ... I0424 12:24:31.940572 1 base_controller.go:123] Shutting down worker of NamespaceFinalizerController_openshift-oauth-apiserver controller ... I0424 12:24:31.940640 1 base_controller.go:113] All NamespaceFinalizerController_openshift-oauth-apiserver workers have been terminated I0424 12:24:31.940580 1 base_controller.go:123] Shutting down worker of OpenShiftAuthenticatorCertRequester controller ... I0424 12:24:31.940654 1 base_controller.go:113] All OpenShiftAuthenticatorCertRequester workers have been terminated I0424 12:24:31.940587 1 base_controller.go:123] Shutting down worker of RevisionController controller ... I0424 12:24:31.940665 1 base_controller.go:113] All RevisionController workers have been terminated I0424 12:24:31.940593 1 base_controller.go:123] Shutting down worker of WebhookAuthenticatorController controller ... I0424 12:24:31.940672 1 base_controller.go:113] All WebhookAuthenticatorController workers have been terminated I0424 12:24:31.940599 1 base_controller.go:123] Shutting down worker of auditPolicyController controller ... I0424 12:24:31.940679 1 base_controller.go:113] All auditPolicyController workers have been terminated I0424 12:24:31.940606 1 base_controller.go:123] Shutting down worker of OAuthServerRouteEndpointAccessibleController controller ... I0424 12:24:31.940686 1 base_controller.go:113] All OAuthServerRouteEndpointAccessibleController workers have been terminated I0424 12:24:31.940611 1 base_controller.go:123] Shutting down worker of CustomRouteController controller ... I0424 12:24:31.940694 1 base_controller.go:113] All CustomRouteController workers have been terminated I0424 12:24:31.940618 1 base_controller.go:123] Shutting down worker of openshift-authentication-Metadata controller ... I0424 12:24:31.940699 1 base_controller.go:113] All openshift-authentication-Metadata workers have been terminated W0424 12:24:31.940793 1 leaderelection.go:84] leader election lost