W0311 17:58:58.484048 1 cmd.go:257] Using insecure, self-signed certificates I0311 17:58:58.484367 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1773251938 cert, and key in /tmp/serving-cert-1954580778/serving-signer.crt, /tmp/serving-cert-1954580778/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1773251938" is unset, resetting to 157680000000000000 years! I0311 17:58:58.993299 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0311 17:58:58.993629 1 observer_polling.go:159] Starting file observer I0311 17:58:58.993713 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0311 17:58:58.993728 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0311 17:58:58.993734 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0311 17:58:58.993739 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0311 17:58:59.016417 1 builder.go:304] service-ca-controller version - I0311 17:58:59.017023 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1954580778/tls.crt::/tmp/serving-cert-1954580778/tls.key" I0311 17:58:59.371388 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0311 17:58:59.376194 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0311 17:58:59.376209 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0311 17:58:59.376227 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0311 17:58:59.376232 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0311 17:58:59.380778 1 secure_serving.go:57] Forcing use of http/1.1 only I0311 17:58:59.380790 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0311 17:58:59.380799 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0311 17:58:59.380805 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0311 17:58:59.380811 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0311 17:58:59.380815 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0311 17:58:59.380818 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0311 17:58:59.380822 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0311 17:58:59.385135 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0311 17:58:59.385352 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0311 17:58:59.385376 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0311 17:58:59.385383 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0311 17:58:59.385390 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0311 17:58:59.385401 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0311 17:58:59.385402 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0311 17:58:59.385653 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1954580778/tls.crt::/tmp/serving-cert-1954580778/tls.key" I0311 17:58:59.385749 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1954580778/tls.crt::/tmp/serving-cert-1954580778/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1773251938\" (2026-03-11 17:58:57 +0000 UTC to 2026-03-11 17:58:58 +0000 UTC (now=2026-03-11 17:58:59.385720422 +0000 UTC))" I0311 17:58:59.385964 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1773251939\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1773251939\" (2026-03-11 16:58:59 +0000 UTC to 2027-03-11 16:58:59 +0000 UTC (now=2026-03-11 17:58:59.385928544 +0000 UTC))" I0311 17:58:59.385986 1 secure_serving.go:213] Serving securely on [::]:8443 I0311 17:58:59.386008 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0311 17:58:59.386022 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0311 17:58:59.387942 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0311 17:58:59.388081 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0311 17:58:59.388449 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I0311 17:58:59.394101 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0311 17:58:59.394207 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"9c69997a-a5be-423c-ad2b-5764e83ca0ba", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9475", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5b4f5db6f9-4bc28_d5155fe1-4324-457d-a7e3-79fe8a15b084 became leader I0311 17:58:59.395147 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0311 17:58:59.395164 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0311 17:58:59.395154 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0311 17:58:59.395186 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0311 17:58:59.395190 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0311 17:58:59.395290 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0311 17:58:59.395644 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0311 17:58:59.396216 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0311 17:58:59.397143 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0311 17:58:59.398022 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0311 17:58:59.398411 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0311 17:58:59.398481 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0311 17:58:59.400045 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0311 17:58:59.444934 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0311 17:58:59.485535 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0311 17:58:59.485547 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0311 17:58:59.486666 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0311 17:58:59.487159 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-11 17:46:45 +0000 UTC to 2036-03-08 17:46:45 +0000 UTC (now=2026-03-11 17:58:59.487122562 +0000 UTC))" I0311 17:58:59.487518 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1954580778/tls.crt::/tmp/serving-cert-1954580778/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1773251938\" (2026-03-11 17:58:57 +0000 UTC to 2026-03-11 17:58:58 +0000 UTC (now=2026-03-11 17:58:59.487494926 +0000 UTC))" I0311 17:58:59.487828 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1773251939\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1773251939\" (2026-03-11 16:58:59 +0000 UTC to 2027-03-11 16:58:59 +0000 UTC (now=2026-03-11 17:58:59.487804694 +0000 UTC))" I0311 17:58:59.488203 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-03-11 17:46:45 +0000 UTC to 2036-03-08 17:46:45 +0000 UTC (now=2026-03-11 17:58:59.48817759 +0000 UTC))" I0311 17:58:59.488269 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-03-11 17:46:46 +0000 UTC to 2036-03-08 17:46:46 +0000 UTC (now=2026-03-11 17:58:59.488246369 +0000 UTC))" I0311 17:58:59.488315 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-03-11 17:46:46 +0000 UTC to 2036-03-08 17:46:46 +0000 UTC (now=2026-03-11 17:58:59.488300438 +0000 UTC))" I0311 17:58:59.488377 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-03-11 17:46:47 +0000 UTC to 2036-03-08 17:46:47 +0000 UTC (now=2026-03-11 17:58:59.488345615 +0000 UTC))" I0311 17:58:59.488431 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-03-11 17:46:47 +0000 UTC to 2036-03-08 17:46:47 +0000 UTC (now=2026-03-11 17:58:59.48841476 +0000 UTC))" I0311 17:58:59.488495 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ovllo0mdp0f1psln8ukpf818ft3h41f-kx-85505a79d5_customer-system-admin-signer@1773251217\" [] issuer=\"\" (2026-03-11 17:46:56 +0000 UTC to 2026-03-18 17:46:57 +0000 UTC (now=2026-03-11 17:58:59.488474666 +0000 UTC))" I0311 17:58:59.488553 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ovllo0mdp0f1psln8ukpf818ft3h41f-kx-85505a79d5_sre-system-admin-signer@1773251217\" [] issuer=\"\" (2026-03-11 17:46:56 +0000 UTC to 2026-03-18 17:46:57 +0000 UTC (now=2026-03-11 17:58:59.488528564 +0000 UTC))" I0311 17:58:59.488653 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-11 17:46:45 +0000 UTC to 2036-03-08 17:46:45 +0000 UTC (now=2026-03-11 17:58:59.488585269 +0000 UTC))" I0311 17:58:59.488985 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1954580778/tls.crt::/tmp/serving-cert-1954580778/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1773251938\" (2026-03-11 17:58:57 +0000 UTC to 2026-03-11 17:58:58 +0000 UTC (now=2026-03-11 17:58:59.488962384 +0000 UTC))" I0311 17:58:59.489196 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1773251939\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1773251939\" (2026-03-11 16:58:59 +0000 UTC to 2027-03-11 16:58:59 +0000 UTC (now=2026-03-11 17:58:59.489169433 +0000 UTC))" I0311 17:58:59.491755 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0311 17:58:59.495336 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0311 17:58:59.495354 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 17:58:59.495360 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0311 17:58:59.495372 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0311 17:58:59.495363 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 17:58:59.495382 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 17:58:59.495387 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 17:58:59.495390 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 17:58:59.495344 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0311 17:58:59.495401 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0311 17:58:59.495405 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0311 17:58:59.495378 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0311 17:58:59.495415 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0311 17:58:59.495408 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0311 17:58:59.495421 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0311 17:58:59.495426 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0311 17:58:59.495430 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0311 17:58:59.495427 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0311 17:58:59.495459 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0311 17:58:59.495530 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0311 17:58:59.495541 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0311 17:58:59.495545 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0311 17:58:59.495550 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0311 17:58:59.495554 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0311 17:58:59.495432 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0311 17:58:59.495459 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0311 17:58:59.495611 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0311 17:58:59.495618 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0311 17:58:59.495623 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0311 17:58:59.495626 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0311 17:58:59.495636 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0311 17:58:59.495652 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.495656 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.495701 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.495730 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.495728 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.496298 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0311 17:58:59.496314 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0311 17:58:59.496321 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0311 17:58:59.496327 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0311 17:58:59.496333 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0311 17:58:59.496339 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0311 17:58:59.497354 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0311 17:58:59.497368 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0311 17:58:59.497373 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0311 17:58:59.497378 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0311 17:58:59.497381 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0311 17:58:59.497385 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0311 17:58:59.508863 1 configmap.go:109] updating configmap open-cluster-management-2ovllo0mdp0f1psln8ukpf818ft3h41f/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.514294 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.514400 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.516832 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.522369 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.522875 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0311 17:58:59.528144 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.528244 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.532257 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.558243 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0311 17:58:59.596001 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0311 17:58:59.596029 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0311 17:58:59.596042 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0311 17:58:59.596047 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0311 17:58:59.596052 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0311 17:58:59.596056 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0311 17:58:59.596094 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0311 17:58:59.596166 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0311 17:58:59.604570 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0311 17:58:59.805313 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:00.063491 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:00.222592 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:00.405902 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:00.607173 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:00.805093 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:01.004199 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:01.207273 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:01.406346 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:01.607709 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:01.804730 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:02.005177 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:02.206288 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:02.406461 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:02.607911 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:02.806152 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:03.006457 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:03.207756 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:03.413462 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:03.605015 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:03.807651 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:04.005218 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:04.208559 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:04.404989 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:04.604821 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0311 17:59:04.806492 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:05.007297 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:05.207106 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:05.406936 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:05.606077 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:05.808107 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:06.006544 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:06.213381 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:06.405992 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0311 17:59:06.608200 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:06.807181 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:07.005782 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:07.203462 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:07.405208 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0311 17:59:07.605028 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:07.806739 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0311 17:59:08.007220 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:08.212813 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:08.416046 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:08.604623 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:08.808173 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:09.008089 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:09.204909 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:09.408208 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:09.604077 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:09.805401 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:10.004429 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:10.204450 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:10.405446 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:10.604470 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:10.806154 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:11.004659 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:11.205363 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:11.405314 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:11.606465 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:11.805150 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:12.004691 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:12.205448 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:12.405658 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:12.604061 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:12.805643 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:13.002915 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:13.203845 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:13.404662 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:13.603540 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:13.804361 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0311 17:59:25.812551 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0311 17:59:59.660451 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0311 17:59:59.669340 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0311 18:00:07.828009 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0311 18:00:07.830447 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0311 18:00:52.873186 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0311 18:03:52.899469 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0311 18:06:00.607505 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.293082 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.307015 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.319962 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.330085 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.342647 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.349876 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.366194 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:04.374893 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:27.074343 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0311 18:06:52.480468 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0311 18:07:12.596881 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0311 18:07:16.283988 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0311 18:07:16.386476 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0311 18:07:16.491804 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0311 18:07:16.590956 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0311 18:07:16.686329 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0311 18:07:16.781918 1 configmap.go:109] updating configmap open-cluster-management-2ovllo0mdp0f1psln8ukpf818ft3h41f/config-service-cabundle with the service signing CA bundle I0311 18:07:16.881502 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0311 18:07:16.982114 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0311 18:07:17.084924 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0311 18:07:17.184751 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0311 18:07:17.282076 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0311 18:07:17.383305 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0311 18:07:17.481691 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0311 18:07:17.581730 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0311 18:07:17.703021 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W0311 18:18:59.559899 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0311 18:38:59.561094 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"