Copying system trust bundle
I0424 12:25:42.824844       1 dynamic_serving_content.go:113] "Loaded a new cert/key pair" name="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key"
I0424 12:25:42.825164       1 dynamic_serving_content.go:113] "Loaded a new cert/key pair" name="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com"
I0424 12:25:43.065519       1 audit.go:340] Using audit backend: ignoreErrors<log>
I0424 12:25:43.077930       1 requestheader_controller.go:244] Loaded a new request header values for RequestHeaderAuthRequestController
I0424 12:25:43.087614       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0424 12:25:43.087630       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0424 12:25:43.087648       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0424 12:25:43.087651       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0424 12:25:43.091723       1 secure_serving.go:57] Forcing use of http/1.1 only
I0424 12:25:43.091742       1 genericapiserver.go:528] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0424 12:25:43.096020       1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController
I0424 12:25:43.096079       1 shared_informer.go:311] Waiting for caches to sync for RequestHeaderAuthRequestController
I0424 12:25:43.096022       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 12:25:43.096159       1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0424 12:25:43.096042       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 12:25:43.096179       1 shared_informer.go:311] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0424 12:25:43.096311       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key"
I0424 12:25:43.096430       1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" certDetail="\"oauth-openshift.openshift-authentication.svc\" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:09:16 +0000 UTC to 2028-04-23 11:09:17 +0000 UTC (now=2026-04-24 12:25:43.09637786 +0000 UTC))"
I0424 12:25:43.096477       1 dynamic_serving_content.go:132] "Starting controller" name="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com"
I0424 12:25:43.096668       1 named_certificates.go:53] "Loaded SNI cert" index=1 certName="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com" certDetail="\"*.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com\" [serving] validServingFor=[*.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com] issuer=\"ingress-operator@1777029007\" (2026-04-24 11:10:08 +0000 UTC to 2028-04-23 11:10:09 +0000 UTC (now=2026-04-24 12:25:43.096644502 +0000 UTC))"
I0424 12:25:43.096800       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033543\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033542\" (2026-04-24 11:25:42 +0000 UTC to 2027-04-24 11:25:42 +0000 UTC (now=2026-04-24 12:25:43.096790159 +0000 UTC))"
I0424 12:25:43.096823       1 secure_serving.go:213] Serving securely on [::]:6443
I0424 12:25:43.096845       1 genericapiserver.go:681] [graceful-termination] waiting for shutdown to be initiated
I0424 12:25:43.096861       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0424 12:25:43.098259       1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229
I0424 12:25:43.098316       1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229
I0424 12:25:43.098361       1 reflector.go:351] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229
I0424 12:25:43.102491       1 reflector.go:351] Caches populated for *v1.Group from k8s.io/client-go@v0.29.2/tools/cache/reflector.go:229
I0424 12:25:43.196416       1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0424 12:25:43.196458       1 shared_informer.go:318] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0424 12:25:43.196416       1 shared_informer.go:318] Caches are synced for RequestHeaderAuthRequestController
I0424 12:25:43.196613       1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:25:43.196589571 +0000 UTC))"
I0424 12:25:43.196773       1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" certDetail="\"oauth-openshift.openshift-authentication.svc\" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:09:16 +0000 UTC to 2028-04-23 11:09:17 +0000 UTC (now=2026-04-24 12:25:43.196757251 +0000 UTC))"
I0424 12:25:43.196898       1 named_certificates.go:53] "Loaded SNI cert" index=1 certName="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com" certDetail="\"*.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com\" [serving] validServingFor=[*.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com] issuer=\"ingress-operator@1777029007\" (2026-04-24 11:10:08 +0000 UTC to 2028-04-23 11:10:09 +0000 UTC (now=2026-04-24 12:25:43.196881694 +0000 UTC))"
I0424 12:25:43.197005       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033543\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033542\" (2026-04-24 11:25:42 +0000 UTC to 2027-04-24 11:25:42 +0000 UTC (now=2026-04-24 12:25:43.196995589 +0000 UTC))"
I0424 12:25:43.197111       1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:22 +0000 UTC to 2036-04-21 10:50:22 +0000 UTC (now=2026-04-24 12:25:43.19709544 +0000 UTC))"
I0424 12:25:43.197132       1 tlsconfig.go:178] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:25 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:25:43.197120474 +0000 UTC))"
I0424 12:25:43.197164       1 tlsconfig.go:178] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:25:43.197141405 +0000 UTC))"
I0424 12:25:43.197185       1 tlsconfig.go:178] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:25:43.197173138 +0000 UTC))"
I0424 12:25:43.197205       1 tlsconfig.go:178] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:23 +0000 UTC to 2036-04-21 10:50:23 +0000 UTC (now=2026-04-24 12:25:43.19719322 +0000 UTC))"
I0424 12:25:43.197247       1 tlsconfig.go:178] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777028935\" [] issuer=\"kubelet-signer\" (2026-04-24 11:08:54 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:25:43.197228663 +0000 UTC))"
I0424 12:25:43.197268       1 tlsconfig.go:178] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777028934\" [] issuer=\"<self>\" (2026-04-24 11:08:53 +0000 UTC to 2029-04-23 11:08:54 +0000 UTC (now=2026-04-24 12:25:43.197255648 +0000 UTC))"
I0424 12:25:43.197289       1 tlsconfig.go:178] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:25:43.197278232 +0000 UTC))"
I0424 12:25:43.197386       1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt::/var/config/system/secrets/v4-0-config-system-serving-cert/tls.key" certDetail="\"oauth-openshift.openshift-authentication.svc\" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:09:16 +0000 UTC to 2028-04-23 11:09:17 +0000 UTC (now=2026-04-24 12:25:43.197376762 +0000 UTC))"
I0424 12:25:43.197515       1 named_certificates.go:53] "Loaded SNI cert" index=1 certName="sni-serving-cert::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com::/var/config/system/secrets/v4-0-config-system-router-certs/apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com" certDetail="\"*.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com\" [serving] validServingFor=[*.apps.clusterpool419-52vmb.rhtap.devcluster.openshift.com] issuer=\"ingress-operator@1777029007\" (2026-04-24 11:10:08 +0000 UTC to 2028-04-23 11:10:09 +0000 UTC (now=2026-04-24 12:25:43.197504564 +0000 UTC))"
I0424 12:25:43.197604       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033543\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033542\" (2026-04-24 11:25:42 +0000 UTC to 2027-04-24 11:25:42 +0000 UTC (now=2026-04-24 12:25:43.197596743 +0000 UTC))"
W0424 12:39:37.679457       1 context.go:119] Failed to set annotations["authentication.openshift.io/username"] to "kube:admin" for audit:"68a16423-9d06-410c-90c8-bd687685f2ad", it has already been set to "kubeadmin"