W0701 19:44:59.013051 1 cmd.go:257] Using insecure, self-signed certificates I0701 19:44:59.013340 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782935099 cert, and key in /tmp/serving-cert-3660287141/serving-signer.crt, /tmp/serving-cert-3660287141/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1782935099" is unset, resetting to 157680000000000000 years! I0701 19:45:00.005991 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0701 19:45:00.006354 1 observer_polling.go:159] Starting file observer I0701 19:45:00.006435 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0701 19:45:00.006450 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0701 19:45:00.006455 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0701 19:45:00.006459 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0701 19:45:00.038030 1 builder.go:304] service-ca-controller version - I0701 19:45:00.038753 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3660287141/tls.crt::/tmp/serving-cert-3660287141/tls.key" I0701 19:45:01.021111 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0701 19:45:01.027030 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0701 19:45:01.027046 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0701 19:45:01.027067 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0701 19:45:01.027073 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0701 19:45:01.030280 1 secure_serving.go:57] Forcing use of http/1.1 only I0701 19:45:01.030295 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0701 19:45:01.030301 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0701 19:45:01.030308 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0701 19:45:01.030313 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0701 19:45:01.030317 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0701 19:45:01.030320 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0701 19:45:01.030324 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0701 19:45:01.035223 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0701 19:45:01.035227 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0701 19:45:01.035251 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0701 19:45:01.035254 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0701 19:45:01.035254 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0701 19:45:01.035270 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0701 19:45:01.035589 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3660287141/tls.crt::/tmp/serving-cert-3660287141/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782935099\" (2026-07-01 19:44:59 +0000 UTC to 2026-07-01 19:45:00 +0000 UTC (now=2026-07-01 19:45:01.03555792 +0000 UTC))" I0701 19:45:01.036258 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3660287141/tls.crt::/tmp/serving-cert-3660287141/tls.key" I0701 19:45:01.036981 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782935101\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782935100\" (2026-07-01 18:45:00 +0000 UTC to 2027-07-01 18:45:00 +0000 UTC (now=2026-07-01 19:45:01.03686286 +0000 UTC))" I0701 19:45:01.037116 1 secure_serving.go:213] Serving securely on [::]:8443 I0701 19:45:01.037183 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0701 19:45:01.037290 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0701 19:45:01.037509 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0701 19:45:01.038438 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.039491 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.039553 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.054645 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0701 19:45:01.054694 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"d13583fe-e981-4513-b195-b8a4502b274e", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10390", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-skcqt_d5de8ade-f1df-4b27-8487-40a0b5a8a9c8 became leader I0701 19:45:01.055843 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0701 19:45:01.055844 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0701 19:45:01.055938 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0701 19:45:01.055852 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0701 19:45:01.055855 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0701 19:45:01.055862 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0701 19:45:01.056340 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0701 19:45:01.056599 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0701 19:45:01.056643 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0701 19:45:01.061397 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.062470 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.063697 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.065210 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.119520 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.135493 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0701 19:45:01.135493 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0701 19:45:01.135494 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0701 19:45:01.135742 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-01 19:33:24 +0000 UTC to 2036-06-28 19:33:24 +0000 UTC (now=2026-07-01 19:45:01.13571453 +0000 UTC))" I0701 19:45:01.135939 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3660287141/tls.crt::/tmp/serving-cert-3660287141/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782935099\" (2026-07-01 19:44:59 +0000 UTC to 2026-07-01 19:45:00 +0000 UTC (now=2026-07-01 19:45:01.135926322 +0000 UTC))" I0701 19:45:01.136092 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782935101\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782935100\" (2026-07-01 18:45:00 +0000 UTC to 2027-07-01 18:45:00 +0000 UTC (now=2026-07-01 19:45:01.136080743 +0000 UTC))" I0701 19:45:01.136239 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-01 19:33:28 +0000 UTC to 2036-06-28 19:33:28 +0000 UTC (now=2026-07-01 19:45:01.136228629 +0000 UTC))" I0701 19:45:01.136269 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-01 19:33:34 +0000 UTC to 2036-06-28 19:33:34 +0000 UTC (now=2026-07-01 19:45:01.136250531 +0000 UTC))" I0701 19:45:01.136284 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-01 19:33:36 +0000 UTC to 2036-06-28 19:33:36 +0000 UTC (now=2026-07-01 19:45:01.136276076 +0000 UTC))" I0701 19:45:01.136300 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-01 19:33:39 +0000 UTC to 2036-06-28 19:33:39 +0000 UTC (now=2026-07-01 19:45:01.136292763 +0000 UTC))" I0701 19:45:01.136326 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-01 19:33:41 +0000 UTC to 2036-06-28 19:33:41 +0000 UTC (now=2026-07-01 19:45:01.136308359 +0000 UTC))" I0701 19:45:01.136347 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9hocmc24gutgt57e2bmcpr09hu1mnp-kx-1d77d55e3d_customer-system-admin-signer@1782934559\" [] issuer=\"\" (2026-07-01 19:36:02 +0000 UTC to 2026-07-08 19:36:03 +0000 UTC (now=2026-07-01 19:45:01.136334613 +0000 UTC))" I0701 19:45:01.136367 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9hocmc24gutgt57e2bmcpr09hu1mnp-kx-1d77d55e3d_sre-system-admin-signer@1782934559\" [] issuer=\"\" (2026-07-01 19:35:59 +0000 UTC to 2026-07-08 19:36:00 +0000 UTC (now=2026-07-01 19:45:01.136357187 +0000 UTC))" I0701 19:45:01.136383 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-01 19:33:24 +0000 UTC to 2036-06-28 19:33:24 +0000 UTC (now=2026-07-01 19:45:01.136375314 +0000 UTC))" I0701 19:45:01.136533 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3660287141/tls.crt::/tmp/serving-cert-3660287141/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782935099\" (2026-07-01 19:44:59 +0000 UTC to 2026-07-01 19:45:00 +0000 UTC (now=2026-07-01 19:45:01.136523265 +0000 UTC))" I0701 19:45:01.136690 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782935101\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782935100\" (2026-07-01 18:45:00 +0000 UTC to 2027-07-01 18:45:00 +0000 UTC (now=2026-07-01 19:45:01.136680189 +0000 UTC))" I0701 19:45:01.156459 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0701 19:45:01.156473 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0701 19:45:01.156479 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0701 19:45:01.156483 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0701 19:45:01.156486 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0701 19:45:01.156489 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0701 19:45:01.156488 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0701 19:45:01.156502 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0701 19:45:01.156530 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0701 19:45:01.156529 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0701 19:45:01.156538 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0701 19:45:01.156542 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0701 19:45:01.156547 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0701 19:45:01.156546 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0701 19:45:01.156567 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0701 19:45:01.156574 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0701 19:45:01.156580 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0701 19:45:01.156584 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0701 19:45:01.156588 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0701 19:45:01.156648 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0701 19:45:01.156660 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0701 19:45:01.156665 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0701 19:45:01.156669 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0701 19:45:01.156674 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0701 19:45:01.156678 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0701 19:45:01.156711 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0701 19:45:01.156726 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0701 19:45:01.156731 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0701 19:45:01.156735 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0701 19:45:01.156738 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0701 19:45:01.156740 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0701 19:45:01.167840 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.233071 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0701 19:45:01.256950 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0701 19:45:01.256995 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0701 19:45:01.257005 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0701 19:45:01.257010 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0701 19:45:01.257013 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0701 19:45:01.257020 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0701 19:45:01.257071 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.257112 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.257072 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.256975 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0701 19:45:01.257360 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0701 19:45:01.257368 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0701 19:45:01.257374 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0701 19:45:01.257378 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0701 19:45:01.257385 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0701 19:45:01.257407 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0701 19:45:01.257452 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0701 19:45:01.257083 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.256957 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0701 19:45:01.257649 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0701 19:45:01.257679 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0701 19:45:01.257705 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0701 19:45:01.257116 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.257729 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0701 19:45:01.257939 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0701 19:45:01.267961 1 configmap.go:109] updating configmap open-cluster-management-2r9hocmc24gutgt57e2bmcpr09hu1mnp/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.274756 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.275026 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.275089 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.276900 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.283549 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0701 19:45:01.291295 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.295405 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.295671 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.295794 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.472194 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.670328 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:01.867150 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:02.073060 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:02.272489 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:02.468555 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:02.668820 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:02.867172 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:03.070683 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:03.268341 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:03.467615 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:03.669710 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:03.869635 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:04.067795 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:04.269207 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:04.469178 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:04.668606 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:04.869228 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:05.068553 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:05.271650 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0701 19:45:05.468126 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0701 19:45:05.468669 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:05.667736 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:05.869264 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:06.068898 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:06.267605 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:06.468206 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0701 19:45:06.668369 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:06.868999 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:07.067694 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:07.269977 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:07.468210 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:07.669061 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:07.868652 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:08.071522 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:08.268177 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0701 19:45:08.467331 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:08.667034 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:08.867129 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:09.068965 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:09.268366 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0701 19:45:09.467741 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:09.668971 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0701 19:45:09.868543 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:10.066909 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:10.267058 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:10.470294 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:10.670605 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:10.870789 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:11.068477 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:11.270545 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:11.467893 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:11.713351 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:11.868234 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:12.068667 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:12.269971 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:12.468184 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:12.667071 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:12.867501 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:13.067442 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:13.271712 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:13.495590 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:13.669641 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:13.869620 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:14.067261 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:14.267549 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:14.468074 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:14.667477 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:14.867580 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:15.067682 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:15.268170 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:15.466714 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:15.668059 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0701 19:45:27.460635 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0701 19:45:27.472358 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0701 19:45:31.629366 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0701 19:45:31.629405 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0701 19:45:53.450607 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0701 19:46:02.573059 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0701 19:47:00.230596 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0701 19:51:35.673045 1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:35.991872 1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.493794 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.509320 1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.518992 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.527637 1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.541420 1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.557174 1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle I0701 19:51:41.567337 1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle I0701 19:52:27.903526 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0701 19:52:30.913689 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0701 19:52:44.247717 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0701 19:53:02.637562 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0701 19:53:28.856169 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0701 19:57:07.392233 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0701 19:57:10.807546 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0701 19:57:10.904257 1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle I0701 19:57:11.003370 1 configmap.go:109] updating configmap open-cluster-management-2r9hocmc24gutgt57e2bmcpr09hu1mnp/config-service-cabundle with the service signing CA bundle I0701 19:57:11.098543 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0701 19:57:11.197291 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0701 19:57:11.297366 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0701 19:57:11.398227 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0701 19:57:11.499259 1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle I0701 19:57:11.597655 1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle I0701 19:57:11.697501 1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle I0701 19:57:11.799935 1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle I0701 19:57:11.898742 1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle I0701 19:57:11.996859 1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle I0701 19:57:12.223609 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0701 19:59:07.543342 1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle I0701 19:59:07.561353 1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle I0701 19:59:07.588988 1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle I0701 19:59:07.614685 1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle I0701 19:59:09.243984 1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle I0701 19:59:09.296555 1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle I0701 19:59:09.365432 1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle I0701 19:59:09.455373 1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle W0701 20:05:01.234451 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0701 20:25:01.235304 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"