W0703 14:13:56.200982 1 cmd.go:257] Using insecure, self-signed certificates I0703 14:13:56.201222 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1783088036 cert, and key in /tmp/serving-cert-4269016924/serving-signer.crt, /tmp/serving-cert-4269016924/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1783088036" is unset, resetting to 157680000000000000 years! I0703 14:13:56.670021 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0703 14:13:56.670404 1 observer_polling.go:159] Starting file observer I0703 14:13:56.670690 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0703 14:13:56.670707 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0703 14:13:56.670715 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0703 14:13:56.670721 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0703 14:13:56.697075 1 builder.go:304] service-ca-controller version - I0703 14:13:56.697698 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4269016924/tls.crt::/tmp/serving-cert-4269016924/tls.key" I0703 14:13:57.471240 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0703 14:13:57.476879 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0703 14:13:57.476894 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0703 14:13:57.476913 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0703 14:13:57.476917 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0703 14:13:57.479927 1 secure_serving.go:57] Forcing use of http/1.1 only I0703 14:13:57.479940 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0703 14:13:57.479950 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0703 14:13:57.479955 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0703 14:13:57.479958 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0703 14:13:57.479961 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0703 14:13:57.479963 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0703 14:13:57.479965 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0703 14:13:57.485149 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0703 14:13:57.485159 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0703 14:13:57.485178 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0703 14:13:57.485194 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0703 14:13:57.485183 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0703 14:13:57.485183 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0703 14:13:57.485502 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4269016924/tls.crt::/tmp/serving-cert-4269016924/tls.key" I0703 14:13:57.485696 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4269016924/tls.crt::/tmp/serving-cert-4269016924/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1783088036\" (2026-07-03 14:13:55 +0000 UTC to 2026-07-03 14:13:56 +0000 UTC (now=2026-07-03 14:13:57.485651956 +0000 UTC))" I0703 14:13:57.485845 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0703 14:13:57.486000 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1783088037\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1783088037\" (2026-07-03 13:13:56 +0000 UTC to 2027-07-03 13:13:56 +0000 UTC (now=2026-07-03 14:13:57.485964686 +0000 UTC))" I0703 14:13:57.486092 1 secure_serving.go:213] Serving securely on [::]:8443 I0703 14:13:57.486126 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0703 14:13:57.486149 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0703 14:13:57.488891 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.488947 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.489331 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.498710 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0703 14:13:57.499553 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"aba23162-731c-4f15-a1f0-a860a565f900", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10535", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-rdz86_db6f331c-2716-4cbd-ac91-a69f589f209e became leader I0703 14:13:57.500629 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0703 14:13:57.500629 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0703 14:13:57.500646 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0703 14:13:57.500642 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0703 14:13:57.500645 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0703 14:13:57.500770 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0703 14:13:57.501129 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0703 14:13:57.501328 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0703 14:13:57.501383 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0703 14:13:57.508462 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.508527 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.510497 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.511562 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.559033 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.585396 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0703 14:13:57.586270 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-03 14:02:01 +0000 UTC to 2036-06-30 14:02:01 +0000 UTC (now=2026-07-03 14:13:57.586216182 +0000 UTC))" I0703 14:13:57.586388 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-03 14:02:07 +0000 UTC to 2036-06-30 14:02:07 +0000 UTC (now=2026-07-03 14:13:57.586366807 +0000 UTC))" I0703 14:13:57.586460 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-03 14:02:11 +0000 UTC to 2036-06-30 14:02:11 +0000 UTC (now=2026-07-03 14:13:57.58643758 +0000 UTC))" I0703 14:13:57.586522 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-03 14:02:18 +0000 UTC to 2036-06-30 14:02:18 +0000 UTC (now=2026-07-03 14:13:57.586492501 +0000 UTC))" I0703 14:13:57.586595 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-03 14:02:20 +0000 UTC to 2036-06-30 14:02:20 +0000 UTC (now=2026-07-03 14:13:57.586564805 +0000 UTC))" I0703 14:13:57.586666 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ran2v631ph0h6rvhmt0u5j5ur8vmafo-kx-e99f04c187_customer-system-admin-signer@1783087475\" [] issuer=\"\" (2026-07-03 14:04:34 +0000 UTC to 2026-07-10 14:04:35 +0000 UTC (now=2026-07-03 14:13:57.586632593 +0000 UTC))" I0703 14:13:57.586719 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ran2v631ph0h6rvhmt0u5j5ur8vmafo-kx-e99f04c187_sre-system-admin-signer@1783087475\" [] issuer=\"\" (2026-07-03 14:04:37 +0000 UTC to 2026-07-10 14:04:38 +0000 UTC (now=2026-07-03 14:13:57.586699824 +0000 UTC))" I0703 14:13:57.586813 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0703 14:13:57.586926 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0703 14:13:57.587228 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4269016924/tls.crt::/tmp/serving-cert-4269016924/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1783088036\" (2026-07-03 14:13:55 +0000 UTC to 2026-07-03 14:13:56 +0000 UTC (now=2026-07-03 14:13:57.587190097 +0000 UTC))" I0703 14:13:57.587540 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1783088037\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1783088037\" (2026-07-03 13:13:56 +0000 UTC to 2027-07-03 13:13:56 +0000 UTC (now=2026-07-03 14:13:57.587515773 +0000 UTC))" I0703 14:13:57.588061 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-03 14:02:01 +0000 UTC to 2036-06-30 14:02:01 +0000 UTC (now=2026-07-03 14:13:57.587825383 +0000 UTC))" I0703 14:13:57.588107 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-03 14:02:07 +0000 UTC to 2036-06-30 14:02:07 +0000 UTC (now=2026-07-03 14:13:57.588086002 +0000 UTC))" I0703 14:13:57.588134 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-03 14:02:11 +0000 UTC to 2036-06-30 14:02:11 +0000 UTC (now=2026-07-03 14:13:57.5881189 +0000 UTC))" I0703 14:13:57.588164 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-03 14:02:18 +0000 UTC to 2036-06-30 14:02:18 +0000 UTC (now=2026-07-03 14:13:57.588149092 +0000 UTC))" I0703 14:13:57.588187 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-03 14:02:20 +0000 UTC to 2036-06-30 14:02:20 +0000 UTC (now=2026-07-03 14:13:57.588176548 +0000 UTC))" I0703 14:13:57.588214 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ran2v631ph0h6rvhmt0u5j5ur8vmafo-kx-e99f04c187_customer-system-admin-signer@1783087475\" [] issuer=\"\" (2026-07-03 14:04:34 +0000 UTC to 2026-07-10 14:04:35 +0000 UTC (now=2026-07-03 14:13:57.58819901 +0000 UTC))" I0703 14:13:57.588236 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ran2v631ph0h6rvhmt0u5j5ur8vmafo-kx-e99f04c187_sre-system-admin-signer@1783087475\" [] issuer=\"\" (2026-07-03 14:04:37 +0000 UTC to 2026-07-10 14:04:38 +0000 UTC (now=2026-07-03 14:13:57.58822644 +0000 UTC))" I0703 14:13:57.588250 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-03 14:01:59 +0000 UTC to 2036-06-30 14:01:59 +0000 UTC (now=2026-07-03 14:13:57.588242667 +0000 UTC))" I0703 14:13:57.588578 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4269016924/tls.crt::/tmp/serving-cert-4269016924/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1783088036\" (2026-07-03 14:13:55 +0000 UTC to 2026-07-03 14:13:56 +0000 UTC (now=2026-07-03 14:13:57.588550121 +0000 UTC))" I0703 14:13:57.588838 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1783088037\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1783088037\" (2026-07-03 13:13:56 +0000 UTC to 2027-07-03 13:13:56 +0000 UTC (now=2026-07-03 14:13:57.588814103 +0000 UTC))" I0703 14:13:57.598939 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.600847 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0703 14:13:57.600861 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0703 14:13:57.600862 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0703 14:13:57.600869 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0703 14:13:57.600873 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0703 14:13:57.600880 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0703 14:13:57.600883 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0703 14:13:57.600886 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0703 14:13:57.600889 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0703 14:13:57.600904 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0703 14:13:57.600874 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0703 14:13:57.600914 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0703 14:13:57.600922 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0703 14:13:57.600951 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0703 14:13:57.601002 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0703 14:13:57.601014 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0703 14:13:57.601023 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0703 14:13:57.601028 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0703 14:13:57.601032 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0703 14:13:57.600955 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0703 14:13:57.601075 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0703 14:13:57.601076 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.601084 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.601088 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.601103 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.601141 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.601082 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0703 14:13:57.601632 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0703 14:13:57.601644 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0703 14:13:57.600982 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0703 14:13:57.601657 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0703 14:13:57.601664 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0703 14:13:57.601670 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0703 14:13:57.601674 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0703 14:13:57.601677 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0703 14:13:57.601449 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0703 14:13:57.601692 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0703 14:13:57.601697 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0703 14:13:57.601701 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0703 14:13:57.601705 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0703 14:13:57.601708 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0703 14:13:57.601464 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0703 14:13:57.601721 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0703 14:13:57.601726 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0703 14:13:57.601732 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0703 14:13:57.601736 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0703 14:13:57.601740 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0703 14:13:57.601649 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0703 14:13:57.618587 1 configmap.go:109] updating configmap open-cluster-management-2ran2v631ph0h6rvhmt0u5j5ur8vmafo/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.618598 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.618946 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.623876 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.623933 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.632728 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0703 14:13:57.632747 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.635107 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.636707 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.679311 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0703 14:13:57.701758 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0703 14:13:57.701779 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0703 14:13:57.701788 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0703 14:13:57.701793 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0703 14:13:57.701800 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0703 14:13:57.701804 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0703 14:13:57.701836 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0703 14:13:57.701850 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0703 14:13:57.715294 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:57.913671 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:58.122795 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:58.317790 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:58.521868 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:58.714082 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:58.913444 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:59.112344 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:59.314280 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:59.511097 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:59.715139 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0703 14:13:59.911828 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:00.114676 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:00.313580 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:00.514472 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:00.715457 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:00.914550 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:01.112408 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:01.313097 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:01.512493 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:01.714433 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:01.912060 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0703 14:14:01.913694 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0703 14:14:02.113033 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:02.314810 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:02.513710 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:02.714396 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:02.912313 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0703 14:14:03.114887 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:03.343922 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:03.552189 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:03.714982 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:03.913015 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:04.113151 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:04.314106 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:04.512217 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:04.713236 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0703 14:14:04.914273 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:05.111441 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:05.312277 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:05.512028 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:05.715463 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0703 14:14:05.913679 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:06.113792 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0703 14:14:06.321315 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:06.512480 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:06.711822 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:06.915839 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:07.112431 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:07.319019 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:07.512664 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:07.715691 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:07.911278 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:08.112201 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:08.313379 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:08.514649 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:08.714520 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:08.915516 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:09.113576 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:09.313688 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:09.513420 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:09.711895 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:09.910772 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:10.111522 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:10.310470 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:10.512119 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:10.711800 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:10.912924 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:11.110767 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:11.312710 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:11.510631 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:11.712532 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:11.913055 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:12.110956 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0703 14:14:17.144683 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0703 14:14:28.210610 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0703 14:14:28.221739 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0703 14:14:32.388068 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0703 14:14:32.388247 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0703 14:15:13.433335 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0703 14:16:01.050346 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0703 14:20:59.322864 1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle I0703 14:20:59.577520 1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.103906 1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.120274 1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.143192 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.170138 1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.184067 1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.220726 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:07.226181 1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle I0703 14:21:38.391805 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0703 14:21:47.617784 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0703 14:22:03.137930 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0703 14:22:07.153548 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0703 14:22:36.730748 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0703 14:26:20.888340 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0703 14:26:24.528688 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0703 14:26:24.626082 1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle I0703 14:26:24.728819 1 configmap.go:109] updating configmap open-cluster-management-2ran2v631ph0h6rvhmt0u5j5ur8vmafo/config-service-cabundle with the service signing CA bundle I0703 14:26:24.822622 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0703 14:26:24.921327 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0703 14:26:25.024000 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0703 14:26:25.121442 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0703 14:26:25.220935 1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle I0703 14:26:25.320727 1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle I0703 14:26:25.422502 1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle I0703 14:26:25.520661 1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle I0703 14:26:25.621200 1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle I0703 14:26:25.721485 1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle I0703 14:26:25.953035 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0703 14:28:25.105353 1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle I0703 14:28:25.132339 1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle I0703 14:28:25.147103 1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle I0703 14:28:25.175967 1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle I0703 14:28:27.331482 1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle I0703 14:28:27.375528 1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle I0703 14:28:27.440537 1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle I0703 14:28:27.535393 1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle W0703 14:33:57.681265 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0703 14:53:57.681463 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"