I0424 12:20:38.716037       1 cmd.go:240] Using service-serving-cert provided certificates
I0424 12:20:38.716252       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0424 12:20:38.717346       1 observer_polling.go:159] Starting file observer
I0424 12:20:38.717578       1 builder.go:298] route-controller-manager version 4.19.0-202511260712.p2.gbc97534.assembly.stream.el9-bc97534-bc97534a12a7a6bac096e4ed488b29535c8d4f33
I0424 12:20:38.718375       1 dynamic_serving_content.go:113] "Loaded a new cert/key pair" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key"
I0424 12:20:41.871409       1 requestheader_controller.go:244] Loaded a new request header values for RequestHeaderAuthRequestController
I0424 12:20:43.344556       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0424 12:20:43.344588       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0424 12:20:43.344612       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0424 12:20:43.344618       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0424 12:20:43.349493       1 secure_serving.go:57] Forcing use of http/1.1 only
W0424 12:20:43.349518       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0424 12:20:43.349524       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0424 12:20:43.349528       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0424 12:20:43.349532       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0424 12:20:43.349534       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0424 12:20:43.349537       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0424 12:20:43.349743       1 genericapiserver.go:514] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0424 12:20:43.786794       1 leaderelection.go:250] attempting to acquire leader lease openshift-route-controller-manager/openshift-route-controllers...
I0424 12:20:43.845868       1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"route-controller-manager.openshift-route-controller-manager.svc\" [serving] validServingFor=[route-controller-manager.openshift-route-controller-manager.svc,route-controller-manager.openshift-route-controller-manager.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:09:11 +0000 UTC to 2028-04-23 11:09:12 +0000 UTC (now=2026-04-24 12:20:43.845825748 +0000 UTC))"
I0424 12:20:43.846120       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033239\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033238\" (2026-04-24 11:20:38 +0000 UTC to 2027-04-24 11:20:38 +0000 UTC (now=2026-04-24 12:20:43.846094355 +0000 UTC))"
I0424 12:20:43.846185       1 secure_serving.go:213] Serving securely on [::]:8443
I0424 12:20:43.846226       1 genericapiserver.go:662] [graceful-termination] waiting for shutdown to be initiated
I0424 12:20:43.846278       1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController
I0424 12:20:43.846301       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0424 12:20:43.846356       1 dynamic_serving_content.go:132] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key"
I0424 12:20:43.846506       1 tlsconfig.go:240] "Starting DynamicServingCertificateController"
I0424 12:20:43.848232       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 12:20:43.848297       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0424 12:20:43.848337       1 configmap_cafile_content.go:202] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 12:20:43.848364       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0424 12:20:43.850900       1 reflector.go:359] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0424 12:20:43.856755       1 reflector.go:359] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0424 12:20:43.858961       1 reflector.go:359] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0424 12:20:43.946494       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0424 12:20:43.948846       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0424 12:20:43.948845       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0424 12:20:43.949065       1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:20:43.949030746 +0000 UTC))"
I0424 12:20:43.949219       1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"route-controller-manager.openshift-route-controller-manager.svc\" [serving] validServingFor=[route-controller-manager.openshift-route-controller-manager.svc,route-controller-manager.openshift-route-controller-manager.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:09:11 +0000 UTC to 2028-04-23 11:09:12 +0000 UTC (now=2026-04-24 12:20:43.94920546 +0000 UTC))"
I0424 12:20:43.949326       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033239\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033238\" (2026-04-24 11:20:38 +0000 UTC to 2027-04-24 11:20:38 +0000 UTC (now=2026-04-24 12:20:43.94931479 +0000 UTC))"
I0424 12:20:43.949476       1 tlsconfig.go:178] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:22 +0000 UTC to 2036-04-21 10:50:22 +0000 UTC (now=2026-04-24 12:20:43.949462173 +0000 UTC))"
I0424 12:20:43.949504       1 tlsconfig.go:178] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:25 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:20:43.949488203 +0000 UTC))"
I0424 12:20:43.949525       1 tlsconfig.go:178] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:20:43.949513557 +0000 UTC))"
I0424 12:20:43.949549       1 tlsconfig.go:178] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:25 +0000 UTC to 2027-04-24 10:50:25 +0000 UTC (now=2026-04-24 12:20:43.949534732 +0000 UTC))"
I0424 12:20:43.949568       1 tlsconfig.go:178] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kubelet-bootstrap-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:23 +0000 UTC to 2036-04-21 10:50:23 +0000 UTC (now=2026-04-24 12:20:43.949556992 +0000 UTC))"
I0424 12:20:43.949589       1 tlsconfig.go:178] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer_@1777028935\" [] issuer=\"kubelet-signer\" (2026-04-24 11:08:54 +0000 UTC to 2026-04-25 10:50:25 +0000 UTC (now=2026-04-24 12:20:43.949577374 +0000 UTC))"
I0424 12:20:43.949609       1 tlsconfig.go:178] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"openshift-kube-apiserver-operator_node-system-admin-signer@1777028934\" [] issuer=\"<self>\" (2026-04-24 11:08:53 +0000 UTC to 2029-04-23 11:08:54 +0000 UTC (now=2026-04-24 12:20:43.949596187 +0000 UTC))"
I0424 12:20:43.949630       1 tlsconfig.go:178] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 10:50:24 +0000 UTC to 2026-04-25 10:50:24 +0000 UTC (now=2026-04-24 12:20:43.949619197 +0000 UTC))"
I0424 12:20:43.949770       1 tlsconfig.go:200] "Loaded serving cert" certName="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" certDetail="\"route-controller-manager.openshift-route-controller-manager.svc\" [serving] validServingFor=[route-controller-manager.openshift-route-controller-manager.svc,route-controller-manager.openshift-route-controller-manager.svc.cluster.local] issuer=\"openshift-service-serving-signer@1777028932\" (2026-04-24 11:09:11 +0000 UTC to 2028-04-23 11:09:12 +0000 UTC (now=2026-04-24 12:20:43.949758723 +0000 UTC))"
I0424 12:20:43.949874       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777033239\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777033238\" (2026-04-24 11:20:38 +0000 UTC to 2027-04-24 11:20:38 +0000 UTC (now=2026-04-24 12:20:43.949865288 +0000 UTC))"