W0703 14:20:04.923383       1 cmd.go:257] Using insecure, self-signed certificates
I0703 14:20:04.923625       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1783088404 cert, and key in /tmp/serving-cert-3531398611/serving-signer.crt, /tmp/serving-cert-3531398611/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1783088404" is unset, resetting to 157680000000000000 years!
I0703 14:20:05.956713       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0703 14:20:05.957082       1 observer_polling.go:159] Starting file observer
I0703 14:20:05.957143       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0703 14:20:05.957157       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0703 14:20:05.957161       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0703 14:20:05.957166       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0703 14:20:05.985402       1 builder.go:304] service-ca-controller version -
I0703 14:20:05.986262       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3531398611/tls.crt::/tmp/serving-cert-3531398611/tls.key"
I0703 14:20:06.560075       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0703 14:20:06.566328       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0703 14:20:06.566346       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0703 14:20:06.566367       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0703 14:20:06.566372       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0703 14:20:06.569545       1 secure_serving.go:57] Forcing use of http/1.1 only
I0703 14:20:06.569556       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0703 14:20:06.569563       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0703 14:20:06.569568       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0703 14:20:06.569573       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0703 14:20:06.569576       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0703 14:20:06.569578       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0703 14:20:06.569581       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0703 14:20:06.574971       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0703 14:20:06.574993       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0703 14:20:06.575008       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0703 14:20:06.575008       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0703 14:20:06.575022       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0703 14:20:06.575013       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0703 14:20:06.575356       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3531398611/tls.crt::/tmp/serving-cert-3531398611/tls.key"
I0703 14:20:06.575518       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3531398611/tls.crt::/tmp/serving-cert-3531398611/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1783088404\" (2026-07-03 14:20:04 +0000 UTC to 2026-07-03 14:20:05 +0000 UTC (now=2026-07-03 14:20:06.575476447 +0000 UTC))"
I0703 14:20:06.575683       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1783088406\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1783088406\" (2026-07-03 13:20:05 +0000 UTC to 2027-07-03 13:20:05 +0000 UTC (now=2026-07-03 14:20:06.575669383 +0000 UTC))"
I0703 14:20:06.575702       1 secure_serving.go:213] Serving securely on [::]:8443
I0703 14:20:06.575719       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0703 14:20:06.575730       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0703 14:20:06.575831       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0703 14:20:06.579670       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.580028       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.580259       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.588821       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0703 14:20:06.588857       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"3d17f563-1f5c-4437-b699-80740b5feade", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11927", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-wcpgw_d37d8145-add5-446a-a4c0-f49ff9424cb5 became leader
I0703 14:20:06.590504       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0703 14:20:06.590511       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0703 14:20:06.590549       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0703 14:20:06.590657       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0703 14:20:06.590681       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0703 14:20:06.590864       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0703 14:20:06.591383       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0703 14:20:06.591605       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0703 14:20:06.591676       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0703 14:20:06.598493       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.598897       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.599083       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.599423       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.662366       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.675116       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0703 14:20:06.675129       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0703 14:20:06.675210       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0703 14:20:06.675302       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-07-03 14:03:58 +0000 UTC to 2036-06-30 14:03:58 +0000 UTC (now=2026-07-03 14:20:06.675258204 +0000 UTC))"
I0703 14:20:06.675501       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3531398611/tls.crt::/tmp/serving-cert-3531398611/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1783088404\" (2026-07-03 14:20:04 +0000 UTC to 2026-07-03 14:20:05 +0000 UTC (now=2026-07-03 14:20:06.675487933 +0000 UTC))"
I0703 14:20:06.675656       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1783088406\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1783088406\" (2026-07-03 13:20:05 +0000 UTC to 2027-07-03 13:20:05 +0000 UTC (now=2026-07-03 14:20:06.675643626 +0000 UTC))"
I0703 14:20:06.675777       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-07-03 14:04:00 +0000 UTC to 2036-06-30 14:04:00 +0000 UTC (now=2026-07-03 14:20:06.675751767 +0000 UTC))"
I0703 14:20:06.675797       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-07-03 14:04:04 +0000 UTC to 2036-06-30 14:04:04 +0000 UTC (now=2026-07-03 14:20:06.675788344 +0000 UTC))"
I0703 14:20:06.675814       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-07-03 14:04:06 +0000 UTC to 2036-06-30 14:04:06 +0000 UTC (now=2026-07-03 14:20:06.675805965 +0000 UTC))"
I0703 14:20:06.675831       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-07-03 14:04:10 +0000 UTC to 2036-06-30 14:04:10 +0000 UTC (now=2026-07-03 14:20:06.675822234 +0000 UTC))"
I0703 14:20:06.675855       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-07-03 14:04:12 +0000 UTC to 2036-06-30 14:04:12 +0000 UTC (now=2026-07-03 14:20:06.675842583 +0000 UTC))"
I0703 14:20:06.675877       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ran2luaqta9b05llfbm25d0jj3kitj7-kx-8da38b4407_customer-system-admin-signer@1783087565\" [] issuer=\"<self>\" (2026-07-03 14:06:05 +0000 UTC to 2026-07-10 14:06:06 +0000 UTC (now=2026-07-03 14:20:06.675866023 +0000 UTC))"
I0703 14:20:06.675901       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ran2luaqta9b05llfbm25d0jj3kitj7-kx-8da38b4407_sre-system-admin-signer@1783087565\" [] issuer=\"<self>\" (2026-07-03 14:06:09 +0000 UTC to 2026-07-10 14:06:10 +0000 UTC (now=2026-07-03 14:20:06.675886714 +0000 UTC))"
I0703 14:20:06.675918       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-07-03 14:03:58 +0000 UTC to 2036-06-30 14:03:58 +0000 UTC (now=2026-07-03 14:20:06.675909988 +0000 UTC))"
I0703 14:20:06.676150       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3531398611/tls.crt::/tmp/serving-cert-3531398611/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1783088404\" (2026-07-03 14:20:04 +0000 UTC to 2026-07-03 14:20:05 +0000 UTC (now=2026-07-03 14:20:06.676126891 +0000 UTC))"
I0703 14:20:06.678807       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1783088406\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1783088406\" (2026-07-03 13:20:05 +0000 UTC to 2027-07-03 13:20:05 +0000 UTC (now=2026-07-03 14:20:06.678756067 +0000 UTC))"
I0703 14:20:06.690732       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0703 14:20:06.690757       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0703 14:20:06.690764       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0703 14:20:06.690769       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0703 14:20:06.690772       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0703 14:20:06.690793       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0703 14:20:06.690807       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0703 14:20:06.690812       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0703 14:20:06.690817       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0703 14:20:06.690821       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0703 14:20:06.690824       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0703 14:20:06.690830       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0703 14:20:06.690859       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0703 14:20:06.690866       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0703 14:20:06.690869       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0703 14:20:06.690873       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0703 14:20:06.690876       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0703 14:20:06.690879       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0703 14:20:06.690907       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0703 14:20:06.692260       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0703 14:20:06.692284       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0703 14:20:06.692292       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0703 14:20:06.692298       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0703 14:20:06.692302       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0703 14:20:06.692307       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0703 14:20:06.692354       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0703 14:20:06.692366       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0703 14:20:06.692371       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0703 14:20:06.692375       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0703 14:20:06.692378       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0703 14:20:06.692381       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0703 14:20:06.724909       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.790610       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0703 14:20:06.790881       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0703 14:20:06.790956       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0703 14:20:06.790990       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0703 14:20:06.791016       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0703 14:20:06.791042       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0703 14:20:06.791087       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0703 14:20:06.791115       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.791155       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.791233       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.791082       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.791017       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0703 14:20:06.791469       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0703 14:20:06.791507       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0703 14:20:06.791531       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0703 14:20:06.791554       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0703 14:20:06.791624       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0703 14:20:06.791139       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.803505       1 configmap.go:109] updating configmap open-cluster-management-2ran2luaqta9b05llfbm25d0jj3kitj7/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.806329       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.806782       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.809452       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.809605       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.814484       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0703 14:20:06.820190       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.821478       1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.821558       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.822721       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:06.891676       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0703 14:20:06.891704       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0703 14:20:06.891714       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0703 14:20:06.891719       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0703 14:20:06.891728       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0703 14:20:06.891732       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0703 14:20:06.891778       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0703 14:20:06.891845       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0703 14:20:07.012569       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:07.209318       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:07.402901       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:07.620959       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:07.805255       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:08.003878       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:08.203428       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:08.402666       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:08.603035       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:08.804153       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:09.002963       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:09.202497       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:09.403253       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:09.602916       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:09.803339       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:10.004356       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:10.202079       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:10.406022       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:10.603288       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:10.801198       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
W0703 14:20:10.804236       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0703 14:20:11.005962       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:11.204721       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:11.405307       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:11.605320       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:11.802336       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:12.005843       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0703 14:20:12.203153       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:12.401870       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:12.605101       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:12.803496       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:13.003828       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:13.204142       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:13.402811       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:13.605090       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:13.804958       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0703 14:20:14.003154       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:14.203260       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:14.402865       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:14.603970       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:14.802743       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0703 14:20:15.004344       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:15.205082       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0703 14:20:15.404662       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:15.604905       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:15.801890       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:16.005799       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:16.204970       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:16.403002       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:16.603630       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:16.803892       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:17.005250       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:17.204324       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:17.404434       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:17.604704       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:17.802041       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:18.004182       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:18.203165       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:18.402560       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:18.601025       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:18.801320       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:19.002563       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:19.203491       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:19.407175       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:19.602093       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:19.803295       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:20.002331       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:20.215105       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:20.424006       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:20.646332       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:20.828186       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:21.011620       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:21.223286       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0703 14:20:32.297134       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0703 14:20:32.307599       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0703 14:20:33.513627       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0703 14:20:36.452395       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0703 14:20:36.452512       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0703 14:21:15.271216       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0703 14:24:23.388497       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0703 14:25:56.424447       1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle
I0703 14:25:56.715103       1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.175043       1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.204095       1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.234723       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.257549       1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.299375       1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.320105       1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:04.353775       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0703 14:26:43.398630       1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle
I0703 14:26:52.564545       1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle
I0703 14:27:06.601169       1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle
I0703 14:27:09.413226       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0703 14:27:10.202115       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0703 14:27:15.374426       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0703 14:27:15.443532       1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle
I0703 14:27:15.509914       1 configmap.go:109] updating configmap open-cluster-management-2ran2luaqta9b05llfbm25d0jj3kitj7/config-service-cabundle with the service signing CA bundle
I0703 14:27:15.609475       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0703 14:27:15.714419       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0703 14:27:15.810670       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0703 14:27:15.909796       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.014378       1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.114296       1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.208654       1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.308707       1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.408403       1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.508044       1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle
I0703 14:27:16.750891       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0703 14:27:34.720163       1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle
I0703 14:34:08.738035       1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle
I0703 14:34:08.746991       1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle
I0703 14:34:08.759562       1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle
I0703 14:34:08.853401       1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle
I0703 14:34:10.620456       1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle
I0703 14:34:10.713410       1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle
I0703 14:34:10.805910       1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle
I0703 14:34:10.907539       1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle
W0703 14:40:06.791584       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"