W0702 02:13:09.241809 1 cmd.go:257] Using insecure, self-signed certificates I0702 02:13:09.242065 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782958389 cert, and key in /tmp/serving-cert-3924644210/serving-signer.crt, /tmp/serving-cert-3924644210/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1782958389" is unset, resetting to 157680000000000000 years! I0702 02:13:09.618943 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0702 02:13:09.619315 1 observer_polling.go:159] Starting file observer I0702 02:13:09.619390 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0702 02:13:09.619404 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0702 02:13:09.619408 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0702 02:13:09.619412 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0702 02:13:09.646668 1 builder.go:304] service-ca-controller version - I0702 02:13:09.647344 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3924644210/tls.crt::/tmp/serving-cert-3924644210/tls.key" I0702 02:13:10.360279 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0702 02:13:10.370070 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0702 02:13:10.370086 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0702 02:13:10.370109 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0702 02:13:10.370118 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0702 02:13:10.373334 1 secure_serving.go:57] Forcing use of http/1.1 only I0702 02:13:10.373346 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0702 02:13:10.373357 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0702 02:13:10.373362 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0702 02:13:10.373366 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0702 02:13:10.373368 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0702 02:13:10.373371 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0702 02:13:10.373373 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0702 02:13:10.378767 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0702 02:13:10.378783 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0702 02:13:10.378830 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 02:13:10.378830 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0702 02:13:10.379399 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0702 02:13:10.379421 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 02:13:10.379660 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3924644210/tls.crt::/tmp/serving-cert-3924644210/tls.key" I0702 02:13:10.380105 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3924644210/tls.crt::/tmp/serving-cert-3924644210/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958389\" (2026-07-02 02:13:08 +0000 UTC to 2026-07-02 02:13:09 +0000 UTC (now=2026-07-02 02:13:10.380071108 +0000 UTC))" I0702 02:13:10.380448 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958390\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958390\" (2026-07-02 01:13:09 +0000 UTC to 2027-07-02 01:13:09 +0000 UTC (now=2026-07-02 02:13:10.380421316 +0000 UTC))" I0702 02:13:10.380495 1 secure_serving.go:213] Serving securely on [::]:8443 I0702 02:13:10.380547 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0702 02:13:10.380583 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0702 02:13:10.381530 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0702 02:13:10.381982 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.382957 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.382961 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.393434 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0702 02:13:10.393486 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"36b4db12-782f-4d17-88ea-1c34f5cd4fa7", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9189", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-j5vc4_05c0f3b8-8ac3-448e-afef-9509d3774811 became leader I0702 02:13:10.394536 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0702 02:13:10.394599 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0702 02:13:10.394537 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0702 02:13:10.394550 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0702 02:13:10.394568 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0702 02:13:10.394664 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0702 02:13:10.395082 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0702 02:13:10.395301 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0702 02:13:10.395308 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0702 02:13:10.399622 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.401262 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.402340 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.402860 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.454305 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.478889 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 02:13:10.478900 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0702 02:13:10.479281 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-02 02:01:11 +0000 UTC to 2036-06-29 02:01:11 +0000 UTC (now=2026-07-02 02:13:10.479257218 +0000 UTC))" I0702 02:13:10.479324 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-02 02:01:16 +0000 UTC to 2036-06-29 02:01:16 +0000 UTC (now=2026-07-02 02:13:10.479296474 +0000 UTC))" I0702 02:13:10.479343 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-02 02:01:18 +0000 UTC to 2036-06-29 02:01:18 +0000 UTC (now=2026-07-02 02:13:10.479334504 +0000 UTC))" I0702 02:13:10.479360 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-02 02:01:19 +0000 UTC to 2036-06-29 02:01:19 +0000 UTC (now=2026-07-02 02:13:10.479351427 +0000 UTC))" I0702 02:13:10.479377 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-02 02:01:24 +0000 UTC to 2036-06-29 02:01:24 +0000 UTC (now=2026-07-02 02:13:10.479368504 +0000 UTC))" I0702 02:13:10.479402 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9ne0rg647slnpt68mtrpp6jrvnu4so-kx-88bf3b3893_customer-system-admin-signer@1782957841\" [] issuer=\"\" (2026-07-02 02:04:02 +0000 UTC to 2026-07-09 02:04:03 +0000 UTC (now=2026-07-02 02:13:10.479391969 +0000 UTC))" I0702 02:13:10.479425 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9ne0rg647slnpt68mtrpp6jrvnu4so-kx-88bf3b3893_sre-system-admin-signer@1782957841\" [] issuer=\"\" (2026-07-02 02:04:01 +0000 UTC to 2026-07-09 02:04:02 +0000 UTC (now=2026-07-02 02:13:10.479412295 +0000 UTC))" I0702 02:13:10.479625 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3924644210/tls.crt::/tmp/serving-cert-3924644210/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958389\" (2026-07-02 02:13:08 +0000 UTC to 2026-07-02 02:13:09 +0000 UTC (now=2026-07-02 02:13:10.479613764 +0000 UTC))" I0702 02:13:10.479789 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958390\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958390\" (2026-07-02 01:13:09 +0000 UTC to 2027-07-02 01:13:09 +0000 UTC (now=2026-07-02 02:13:10.479778719 +0000 UTC))" I0702 02:13:10.479827 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 02:13:10.480070 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-02 02:01:11 +0000 UTC to 2036-06-29 02:01:11 +0000 UTC (now=2026-07-02 02:13:10.480046013 +0000 UTC))" I0702 02:13:10.480097 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-02 02:01:16 +0000 UTC to 2036-06-29 02:01:16 +0000 UTC (now=2026-07-02 02:13:10.480087184 +0000 UTC))" I0702 02:13:10.480115 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-02 02:01:18 +0000 UTC to 2036-06-29 02:01:18 +0000 UTC (now=2026-07-02 02:13:10.48010692 +0000 UTC))" I0702 02:13:10.480138 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-02 02:01:19 +0000 UTC to 2036-06-29 02:01:19 +0000 UTC (now=2026-07-02 02:13:10.480125508 +0000 UTC))" I0702 02:13:10.480156 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-02 02:01:24 +0000 UTC to 2036-06-29 02:01:24 +0000 UTC (now=2026-07-02 02:13:10.480147856 +0000 UTC))" I0702 02:13:10.480173 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9ne0rg647slnpt68mtrpp6jrvnu4so-kx-88bf3b3893_customer-system-admin-signer@1782957841\" [] issuer=\"\" (2026-07-02 02:04:02 +0000 UTC to 2026-07-09 02:04:03 +0000 UTC (now=2026-07-02 02:13:10.480162427 +0000 UTC))" I0702 02:13:10.480191 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9ne0rg647slnpt68mtrpp6jrvnu4so-kx-88bf3b3893_sre-system-admin-signer@1782957841\" [] issuer=\"\" (2026-07-02 02:04:01 +0000 UTC to 2026-07-09 02:04:02 +0000 UTC (now=2026-07-02 02:13:10.480182449 +0000 UTC))" I0702 02:13:10.480213 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 02:01:08 +0000 UTC to 2036-06-29 02:01:08 +0000 UTC (now=2026-07-02 02:13:10.480199677 +0000 UTC))" I0702 02:13:10.480391 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3924644210/tls.crt::/tmp/serving-cert-3924644210/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782958389\" (2026-07-02 02:13:08 +0000 UTC to 2026-07-02 02:13:09 +0000 UTC (now=2026-07-02 02:13:10.480380953 +0000 UTC))" I0702 02:13:10.480553 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782958390\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782958390\" (2026-07-02 01:13:09 +0000 UTC to 2027-07-02 01:13:09 +0000 UTC (now=2026-07-02 02:13:10.480542407 +0000 UTC))" I0702 02:13:10.494712 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0702 02:13:10.494729 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0702 02:13:10.494731 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0702 02:13:10.494737 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0702 02:13:10.494742 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0702 02:13:10.494747 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0702 02:13:10.494750 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0702 02:13:10.494713 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0702 02:13:10.494742 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:13:10.494770 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0702 02:13:10.494774 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:13:10.494776 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0702 02:13:10.494778 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:13:10.494781 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:13:10.494784 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0702 02:13:10.494782 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0702 02:13:10.494831 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0702 02:13:10.494842 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0702 02:13:10.494856 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0702 02:13:10.495338 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0702 02:13:10.495356 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0702 02:13:10.495362 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0702 02:13:10.495366 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0702 02:13:10.495368 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0702 02:13:10.495372 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0702 02:13:10.495422 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0702 02:13:10.495432 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0702 02:13:10.495438 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0702 02:13:10.495442 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0702 02:13:10.495446 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0702 02:13:10.495448 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0702 02:13:10.503642 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.579032 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 02:13:10.595384 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0702 02:13:10.595462 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0702 02:13:10.595494 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0702 02:13:10.595519 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0702 02:13:10.595541 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0702 02:13:10.595563 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0702 02:13:10.595617 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0702 02:13:10.596217 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0702 02:13:10.596285 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0702 02:13:10.596313 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0702 02:13:10.596339 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0702 02:13:10.596363 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0702 02:13:10.596386 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0702 02:13:10.596436 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.596836 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.597071 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.597251 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.597426 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle W0702 02:13:10.597615 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0702 02:13:10.597691 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0702 02:13:10.597718 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:13:10.597742 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:13:10.597764 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:13:10.597786 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:13:10.597837 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 02:13:10.607409 1 configmap.go:109] updating configmap open-cluster-management-2r9ne0rg647slnpt68mtrpp6jrvnu4so/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.612880 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.613203 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.617963 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.618828 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.619680 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0702 02:13:10.630943 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.631496 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.638078 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.640173 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:10.816644 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:11.015787 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:11.209571 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:11.407480 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:11.607117 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:11.809364 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:12.006754 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:12.208702 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:12.410130 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:12.612881 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:12.810623 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:13.012973 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:13.209433 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:13.408416 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:13.611081 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:13.806918 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:14.006172 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:14.208673 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:14.408447 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:14.608831 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0702 02:13:14.807326 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0702 02:13:14.808573 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:15.010513 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:15.211073 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:15.407023 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:15.607972 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:15.808498 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0702 02:13:16.008776 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:16.208926 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:16.416216 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:16.608861 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:16.808133 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:17.008027 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:17.208507 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:17.406487 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:17.606287 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0702 02:13:17.806215 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:18.010405 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:18.206152 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:18.408214 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:18.609228 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0702 02:13:18.810955 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:19.006488 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0702 02:13:19.209990 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:19.410102 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:19.608021 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:19.808482 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:20.007106 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:20.210122 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:20.408372 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:20.606253 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:20.808517 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:21.007344 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:21.208466 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:21.409886 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:21.606566 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:21.808895 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:22.082604 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:22.208373 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:22.407397 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:22.607865 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:22.809249 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:23.008235 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:23.210598 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:23.408380 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:23.607620 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:23.809007 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:24.012537 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:24.214957 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:24.408510 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:24.607255 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:24.815086 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:25.006508 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0702 02:13:38.919030 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0702 02:13:38.932585 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0702 02:13:43.122052 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0702 02:13:43.127390 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0702 02:14:01.370023 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0702 02:14:13.429660 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0702 02:17:30.823422 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0702 02:21:07.343915 1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:07.632227 1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.882029 1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.899601 1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.914436 1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.932479 1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.946079 1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.971043 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:21:14.972631 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0702 02:22:00.688952 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0702 02:22:09.635160 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 02:22:15.966055 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0702 02:28:13.576392 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0702 02:28:17.169588 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0702 02:28:17.263180 1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle I0702 02:28:17.367243 1 configmap.go:109] updating configmap open-cluster-management-2r9ne0rg647slnpt68mtrpp6jrvnu4so/config-service-cabundle with the service signing CA bundle I0702 02:28:17.461722 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0702 02:28:17.563755 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0702 02:28:17.662415 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0702 02:28:17.761561 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0702 02:28:17.865000 1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle I0702 02:28:17.967605 1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle I0702 02:28:18.061285 1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle I0702 02:28:18.161690 1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle I0702 02:28:18.266859 1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle I0702 02:28:18.362287 1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle I0702 02:28:18.495707 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0702 02:30:08.683235 1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle I0702 02:30:08.702871 1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle I0702 02:30:08.738735 1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle I0702 02:30:08.764989 1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle I0702 02:30:10.601851 1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle I0702 02:30:10.697514 1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle I0702 02:30:10.778387 1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle I0702 02:30:10.847053 1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle W0702 02:33:10.580854 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0702 02:53:10.580964 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"