W0702 11:29:55.404444 1 cmd.go:257] Using insecure, self-signed certificates I0702 11:29:55.404678 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1782991795 cert, and key in /tmp/serving-cert-2875151267/serving-signer.crt, /tmp/serving-cert-2875151267/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1782991795" is unset, resetting to 157680000000000000 years! I0702 11:29:56.191990 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0702 11:29:56.192387 1 observer_polling.go:159] Starting file observer I0702 11:29:56.192509 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0702 11:29:56.192526 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0702 11:29:56.192533 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0702 11:29:56.192539 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0702 11:29:56.226640 1 builder.go:304] service-ca-controller version - I0702 11:29:56.227319 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2875151267/tls.crt::/tmp/serving-cert-2875151267/tls.key" I0702 11:29:56.418170 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0702 11:29:56.424777 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0702 11:29:56.424791 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0702 11:29:56.424810 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0702 11:29:56.424816 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0702 11:29:56.428065 1 secure_serving.go:57] Forcing use of http/1.1 only I0702 11:29:56.428066 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0702 11:29:56.428085 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0702 11:29:56.428089 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0702 11:29:56.428093 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0702 11:29:56.428095 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0702 11:29:56.428097 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0702 11:29:56.428099 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0702 11:29:56.432342 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0702 11:29:56.432353 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0702 11:29:56.432380 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0702 11:29:56.432380 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0702 11:29:56.432380 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 11:29:56.432430 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 11:29:56.432702 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2875151267/tls.crt::/tmp/serving-cert-2875151267/tls.key" I0702 11:29:56.432863 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2875151267/tls.crt::/tmp/serving-cert-2875151267/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782991795\" (2026-07-02 11:29:55 +0000 UTC to 2026-07-02 11:29:56 +0000 UTC (now=2026-07-02 11:29:56.432830317 +0000 UTC))" I0702 11:29:56.433055 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782991796\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782991796\" (2026-07-02 10:29:56 +0000 UTC to 2027-07-02 10:29:56 +0000 UTC (now=2026-07-02 11:29:56.433040884 +0000 UTC))" I0702 11:29:56.433075 1 secure_serving.go:213] Serving securely on [::]:8443 I0702 11:29:56.433091 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0702 11:29:56.433105 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0702 11:29:56.433466 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0702 11:29:56.435247 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.435248 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.435867 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.444217 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0702 11:29:56.444297 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"b5a3c99a-3b2b-4207-b009-1a193090f2c4", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10361", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-5sclm_ed873f40-4151-486c-979d-e2704fb7d915 became leader I0702 11:29:56.446247 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0702 11:29:56.446315 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0702 11:29:56.446353 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0702 11:29:56.446296 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0702 11:29:56.446398 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0702 11:29:56.446446 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0702 11:29:56.446330 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0702 11:29:56.446785 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0702 11:29:56.446850 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0702 11:29:56.448114 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.450254 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.450389 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.451603 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.505968 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.532446 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0702 11:29:56.532548 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0702 11:29:56.532546 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0702 11:29:56.532722 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 11:18:08 +0000 UTC to 2036-06-29 11:18:08 +0000 UTC (now=2026-07-02 11:29:56.5326987 +0000 UTC))" I0702 11:29:56.532949 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2875151267/tls.crt::/tmp/serving-cert-2875151267/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782991795\" (2026-07-02 11:29:55 +0000 UTC to 2026-07-02 11:29:56 +0000 UTC (now=2026-07-02 11:29:56.532929655 +0000 UTC))" I0702 11:29:56.533121 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782991796\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782991796\" (2026-07-02 10:29:56 +0000 UTC to 2027-07-02 10:29:56 +0000 UTC (now=2026-07-02 11:29:56.533108879 +0000 UTC))" I0702 11:29:56.533275 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-07-02 11:18:09 +0000 UTC to 2036-06-29 11:18:09 +0000 UTC (now=2026-07-02 11:29:56.533263458 +0000 UTC))" I0702 11:29:56.533296 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-07-02 11:18:12 +0000 UTC to 2036-06-29 11:18:12 +0000 UTC (now=2026-07-02 11:29:56.533287202 +0000 UTC))" I0702 11:29:56.533311 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-07-02 11:18:14 +0000 UTC to 2036-06-29 11:18:14 +0000 UTC (now=2026-07-02 11:29:56.533303022 +0000 UTC))" I0702 11:29:56.533335 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-07-02 11:18:18 +0000 UTC to 2036-06-29 11:18:18 +0000 UTC (now=2026-07-02 11:29:56.533320239 +0000 UTC))" I0702 11:29:56.533349 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-07-02 11:18:20 +0000 UTC to 2036-06-29 11:18:20 +0000 UTC (now=2026-07-02 11:29:56.533341215 +0000 UTC))" I0702 11:29:56.533381 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9vhpln4uc0l5dn3a1fjcopb8uih7bq-kx-1aff89eb89_customer-system-admin-signer@1782991277\" [] issuer=\"\" (2026-07-02 11:21:19 +0000 UTC to 2026-07-09 11:21:20 +0000 UTC (now=2026-07-02 11:29:56.533364192 +0000 UTC))" I0702 11:29:56.533406 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2r9vhpln4uc0l5dn3a1fjcopb8uih7bq-kx-1aff89eb89_sre-system-admin-signer@1782991277\" [] issuer=\"\" (2026-07-02 11:21:19 +0000 UTC to 2026-07-09 11:21:20 +0000 UTC (now=2026-07-02 11:29:56.53339259 +0000 UTC))" I0702 11:29:56.533423 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-07-02 11:18:08 +0000 UTC to 2036-06-29 11:18:08 +0000 UTC (now=2026-07-02 11:29:56.53341566 +0000 UTC))" I0702 11:29:56.533580 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2875151267/tls.crt::/tmp/serving-cert-2875151267/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1782991795\" (2026-07-02 11:29:55 +0000 UTC to 2026-07-02 11:29:56 +0000 UTC (now=2026-07-02 11:29:56.53356953 +0000 UTC))" I0702 11:29:56.533736 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1782991796\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1782991796\" (2026-07-02 10:29:56 +0000 UTC to 2027-07-02 10:29:56 +0000 UTC (now=2026-07-02 11:29:56.533725317 +0000 UTC))" I0702 11:29:56.546503 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0702 11:29:56.546519 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0702 11:29:56.546525 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0702 11:29:56.546529 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0702 11:29:56.546532 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0702 11:29:56.546535 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0702 11:29:56.546561 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0702 11:29:56.546504 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0702 11:29:56.546596 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0702 11:29:56.546603 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0702 11:29:56.546607 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0702 11:29:56.546612 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0702 11:29:56.546616 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0702 11:29:56.546654 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0702 11:29:56.546668 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0702 11:29:56.546672 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0702 11:29:56.546675 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0702 11:29:56.546678 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0702 11:29:56.546681 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0702 11:29:56.546868 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0702 11:29:56.546879 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0702 11:29:56.546884 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0702 11:29:56.546887 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0702 11:29:56.546890 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0702 11:29:56.546894 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0702 11:29:56.546940 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0702 11:29:56.546946 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0702 11:29:56.546950 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0702 11:29:56.546953 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0702 11:29:56.546956 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0702 11:29:56.546958 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0702 11:29:56.555517 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.609450 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0702 11:29:56.647084 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0702 11:29:56.647123 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0702 11:29:56.647129 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0702 11:29:56.647144 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 11:29:56.647151 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 11:29:56.647155 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 11:29:56.647160 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 11:29:56.647165 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0702 11:29:56.647106 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0702 11:29:56.647174 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0702 11:29:56.647181 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0702 11:29:56.647187 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0702 11:29:56.647153 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.647203 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0702 11:29:56.647193 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0702 11:29:56.647334 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... W0702 11:29:56.647379 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0702 11:29:56.647132 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0702 11:29:56.647485 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0702 11:29:56.647510 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0702 11:29:56.647533 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0702 11:29:56.647564 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.647593 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.647535 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.647511 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.659057 1 configmap.go:109] updating configmap open-cluster-management-2r9vhpln4uc0l5dn3a1fjcopb8uih7bq/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.663530 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.667121 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.667496 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.668035 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.679521 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0702 11:29:56.679544 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.685667 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.688344 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.688905 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:56.857629 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:57.061447 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:57.261369 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:57.465654 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:57.664448 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:57.861480 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:58.060421 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:58.261559 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:58.460699 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:58.658413 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:58.861121 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:59.060696 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:59.261410 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:59.460282 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:59.660343 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:29:59.860588 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:00.066932 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:00.270339 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:00.468573 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:00.662542 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:00.859483 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:01.058509 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:01.259169 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle W0702 11:30:01.259473 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0702 11:30:01.464334 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:01.658094 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:01.858863 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0702 11:30:02.059858 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:02.260230 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:02.458334 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:02.660131 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:02.859435 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:03.060674 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:03.261876 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:03.460253 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:03.660707 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0702 11:30:03.862283 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:04.060461 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:04.257898 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:04.460370 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:04.658320 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0702 11:30:04.860633 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:05.061907 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0702 11:30:05.260953 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:05.460243 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:05.661659 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:05.860110 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:06.062792 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:06.261204 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:06.460460 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:06.660640 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:06.861269 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:07.060942 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:07.257946 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:07.460278 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:07.657635 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:07.862911 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:08.059194 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:08.258610 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:08.457843 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:08.657742 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:08.858479 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:09.058410 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:09.258198 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:09.457865 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:09.658533 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:09.857632 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:10.057896 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:10.257992 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:10.457952 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:10.660234 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:10.857849 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:11.057341 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0702 11:30:22.785368 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0702 11:30:22.799280 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0702 11:30:23.973650 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0702 11:30:28.965628 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0702 11:30:28.977527 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0702 11:31:01.025668 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0702 11:31:57.535796 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0702 11:36:25.548381 1 configmap.go:109] updating configmap tssc/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:25.827598 1 configmap.go:109] updating configmap null/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.687186 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.701849 1 configmap.go:109] updating configmap tssc-tpa/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.717185 1 configmap.go:109] updating configmap tssc-tas/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.733007 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.748291 1 configmap.go:109] updating configmap tssc-keycloak/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.761164 1 configmap.go:109] updating configmap tssc-dh/openshift-service-ca.crt with the service signing CA bundle I0702 11:36:33.782876 1 configmap.go:109] updating configmap tssc-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 11:37:03.889911 1 configmap.go:109] updating configmap openshift-operators/openshift-gitops-operator-metrics-monitor-ca-bundle with the service signing CA bundle I0702 11:37:16.167970 1 configmap.go:109] updating configmap openshift-gitops/openshift-service-ca.crt with the service signing CA bundle I0702 11:37:17.219511 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0702 11:41:49.232830 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0702 11:41:52.643876 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0702 11:41:52.739921 1 configmap.go:109] updating configmap null/config-service-cabundle with the service signing CA bundle I0702 11:41:52.837051 1 configmap.go:109] updating configmap open-cluster-management-2r9vhpln4uc0l5dn3a1fjcopb8uih7bq/config-service-cabundle with the service signing CA bundle I0702 11:41:52.935303 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0702 11:41:53.036681 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0702 11:41:53.137525 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0702 11:41:53.238353 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0702 11:41:53.338551 1 configmap.go:109] updating configmap tssc/config-service-cabundle with the service signing CA bundle I0702 11:41:53.436610 1 configmap.go:109] updating configmap tssc-dh/config-service-cabundle with the service signing CA bundle I0702 11:41:53.538676 1 configmap.go:109] updating configmap tssc-gitops/config-service-cabundle with the service signing CA bundle I0702 11:41:53.636354 1 configmap.go:109] updating configmap tssc-keycloak/config-service-cabundle with the service signing CA bundle I0702 11:41:53.737030 1 configmap.go:109] updating configmap tssc-tas/config-service-cabundle with the service signing CA bundle I0702 11:41:53.838747 1 configmap.go:109] updating configmap tssc-tpa/config-service-cabundle with the service signing CA bundle I0702 11:41:54.051290 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0702 11:43:29.529893 1 configmap.go:109] updating configmap tssc-app-ci/openshift-service-ca.crt with the service signing CA bundle I0702 11:43:29.538888 1 configmap.go:109] updating configmap tssc-app-development/openshift-service-ca.crt with the service signing CA bundle I0702 11:43:29.553136 1 configmap.go:109] updating configmap tssc-app-prod/openshift-service-ca.crt with the service signing CA bundle I0702 11:43:29.566156 1 configmap.go:109] updating configmap tssc-app-stage/openshift-service-ca.crt with the service signing CA bundle I0702 11:43:31.012009 1 configmap.go:109] updating configmap tssc-app-ci/config-service-cabundle with the service signing CA bundle I0702 11:43:31.108940 1 configmap.go:109] updating configmap tssc-app-development/config-service-cabundle with the service signing CA bundle I0702 11:43:31.198327 1 configmap.go:109] updating configmap tssc-app-prod/config-service-cabundle with the service signing CA bundle I0702 11:43:31.308973 1 configmap.go:109] updating configmap tssc-app-stage/config-service-cabundle with the service signing CA bundle W0702 11:49:56.610509 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0702 12:09:56.611516 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"