W0311 14:01:00.579131 1 cmd.go:257] Using insecure, self-signed certificates I0311 14:01:00.579420 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1773237660 cert, and key in /tmp/serving-cert-1293999353/serving-signer.crt, /tmp/serving-cert-1293999353/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1773237660" is unset, resetting to 157680000000000000 years! I0311 14:01:00.785753 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0311 14:01:00.786067 1 observer_polling.go:159] Starting file observer I0311 14:01:00.786144 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0311 14:01:00.786158 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0311 14:01:00.786164 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0311 14:01:00.786169 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0311 14:01:00.814498 1 builder.go:304] service-ca-controller version - I0311 14:01:00.815150 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1293999353/tls.crt::/tmp/serving-cert-1293999353/tls.key" I0311 14:01:01.148034 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0311 14:01:01.154524 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0311 14:01:01.154539 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0311 14:01:01.154579 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0311 14:01:01.154587 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0311 14:01:01.158162 1 secure_serving.go:57] Forcing use of http/1.1 only I0311 14:01:01.158172 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0311 14:01:01.158180 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0311 14:01:01.158185 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0311 14:01:01.158189 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0311 14:01:01.158193 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0311 14:01:01.158195 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0311 14:01:01.158198 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0311 14:01:01.163743 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0311 14:01:01.163753 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0311 14:01:01.163774 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0311 14:01:01.163776 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0311 14:01:01.163772 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0311 14:01:01.163791 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0311 14:01:01.164084 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1293999353/tls.crt::/tmp/serving-cert-1293999353/tls.key" I0311 14:01:01.164125 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1293999353/tls.crt::/tmp/serving-cert-1293999353/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1773237660\" (2026-03-11 14:00:59 +0000 UTC to 2026-03-11 14:01:00 +0000 UTC (now=2026-03-11 14:01:01.164095185 +0000 UTC))" I0311 14:01:01.164294 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1773237661\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1773237660\" (2026-03-11 13:01:00 +0000 UTC to 2027-03-11 13:01:00 +0000 UTC (now=2026-03-11 14:01:01.164271579 +0000 UTC))" I0311 14:01:01.164322 1 secure_serving.go:213] Serving securely on [::]:8443 I0311 14:01:01.164344 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0311 14:01:01.164348 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0311 14:01:01.164959 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0311 14:01:01.168079 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183 I0311 14:01:01.168287 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0311 14:01:01.168459 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209 I0311 14:01:01.178302 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0311 14:01:01.178357 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"bf51339e-ab8b-4cf3-9412-3918a4a51e34", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10018", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5b4f5db6f9-xvjjh_b96d1233-c40b-4f4b-8bbd-4dff9b76262a became leader I0311 14:01:01.179341 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0311 14:01:01.179403 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0311 14:01:01.179387 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0311 14:01:01.179404 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0311 14:01:01.179421 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0311 14:01:01.179499 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0311 14:01:01.179829 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0311 14:01:01.180083 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0311 14:01:01.180119 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0311 14:01:01.188363 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0311 14:01:01.188566 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go/informers/factory.go:160 I0311 14:01:01.188737 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/kube-aggregator/pkg/client/informers/externalversions/factory.go:141 I0311 14:01:01.189499 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go/informers/factory.go:160 I0311 14:01:01.237604 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go/informers/factory.go:160 I0311 14:01:01.264172 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0311 14:01:01.264185 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0311 14:01:01.264196 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0311 14:01:01.264505 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-11 13:49:32 +0000 UTC to 2036-03-08 13:49:32 +0000 UTC (now=2026-03-11 14:01:01.264326549 +0000 UTC))" I0311 14:01:01.264864 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1293999353/tls.crt::/tmp/serving-cert-1293999353/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1773237660\" (2026-03-11 14:00:59 +0000 UTC to 2026-03-11 14:01:00 +0000 UTC (now=2026-03-11 14:01:01.264804651 +0000 UTC))" I0311 14:01:01.265178 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1773237661\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1773237660\" (2026-03-11 13:01:00 +0000 UTC to 2027-03-11 13:01:00 +0000 UTC (now=2026-03-11 14:01:01.265145779 +0000 UTC))" I0311 14:01:01.265567 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-03-11 13:49:32 +0000 UTC to 2036-03-08 13:49:32 +0000 UTC (now=2026-03-11 14:01:01.265517969 +0000 UTC))" I0311 14:01:01.265645 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-03-11 13:49:33 +0000 UTC to 2036-03-08 13:49:33 +0000 UTC (now=2026-03-11 14:01:01.265624586 +0000 UTC))" I0311 14:01:01.265701 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-03-11 13:49:33 +0000 UTC to 2036-03-08 13:49:33 +0000 UTC (now=2026-03-11 14:01:01.265678014 +0000 UTC))" I0311 14:01:01.265747 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-03-11 13:49:34 +0000 UTC to 2036-03-08 13:49:34 +0000 UTC (now=2026-03-11 14:01:01.265731772 +0000 UTC))" I0311 14:01:01.265790 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-03-11 13:49:35 +0000 UTC to 2036-03-08 13:49:35 +0000 UTC (now=2026-03-11 14:01:01.265775415 +0000 UTC))" I0311 14:01:01.265843 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ovi6kukph2dn9f582ta9gknbc93k080-kx-301a3ecc7f_customer-system-admin-signer@1773236984\" [] issuer=\"\" (2026-03-11 13:49:43 +0000 UTC to 2026-03-18 13:49:44 +0000 UTC (now=2026-03-11 14:01:01.265824055 +0000 UTC))" I0311 14:01:01.265920 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ovi6kukph2dn9f582ta9gknbc93k080-kx-301a3ecc7f_sre-system-admin-signer@1773236984\" [] issuer=\"\" (2026-03-11 13:49:43 +0000 UTC to 2026-03-18 13:49:44 +0000 UTC (now=2026-03-11 14:01:01.265875658 +0000 UTC))" I0311 14:01:01.265978 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-11 13:49:32 +0000 UTC to 2036-03-08 13:49:32 +0000 UTC (now=2026-03-11 14:01:01.265954993 +0000 UTC))" I0311 14:01:01.266281 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1293999353/tls.crt::/tmp/serving-cert-1293999353/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1773237660\" (2026-03-11 14:00:59 +0000 UTC to 2026-03-11 14:01:00 +0000 UTC (now=2026-03-11 14:01:01.266246739 +0000 UTC))" I0311 14:01:01.266616 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1773237661\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1773237660\" (2026-03-11 13:01:00 +0000 UTC to 2027-03-11 13:01:00 +0000 UTC (now=2026-03-11 14:01:01.26659516 +0000 UTC))" I0311 14:01:01.279494 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0311 14:01:01.279510 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0311 14:01:01.279515 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0311 14:01:01.279522 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0311 14:01:01.279525 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0311 14:01:01.279529 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0311 14:01:01.279515 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0311 14:01:01.279539 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0311 14:01:01.279564 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0311 14:01:01.279569 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0311 14:01:01.279573 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0311 14:01:01.279579 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0311 14:01:01.279532 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0311 14:01:01.279589 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0311 14:01:01.279594 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0311 14:01:01.279602 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0311 14:01:01.279532 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0311 14:01:01.279619 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0311 14:01:01.279625 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0311 14:01:01.280227 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0311 14:01:01.280240 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0311 14:01:01.280245 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0311 14:01:01.280248 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0311 14:01:01.280250 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0311 14:01:01.280254 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0311 14:01:01.280229 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0311 14:01:01.280268 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0311 14:01:01.280271 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0311 14:01:01.280275 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0311 14:01:01.280280 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0311 14:01:01.280284 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0311 14:01:01.300483 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go/informers/factory.go:160 I0311 14:01:01.379909 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0311 14:01:01.379934 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0311 14:01:01.379945 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0311 14:01:01.379950 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0311 14:01:01.379961 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0311 14:01:01.379964 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0311 14:01:01.379999 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.380046 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.380183 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.380319 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.380430 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.380638 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0311 14:01:01.380702 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 14:01:01.380719 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 14:01:01.380724 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 14:01:01.380729 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 14:01:01.380733 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0311 14:01:01.384410 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/factory.go:141 I0311 14:01:01.397473 1 configmap.go:109] updating configmap open-cluster-management-2ovi6kukph2dn9f582ta9gknbc93k080/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.398494 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.402674 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.402685 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.403743 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.419011 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0311 14:01:01.419052 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.419068 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.422903 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.426398 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.480001 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0311 14:01:01.480021 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0311 14:01:01.480031 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0311 14:01:01.480036 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0311 14:01:01.480040 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0311 14:01:01.480044 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0311 14:01:01.480090 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0311 14:01:01.480156 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0311 14:01:01.632716 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:01.809326 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:02.013420 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:02.197822 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:02.394248 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:02.594825 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:02.790956 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:02.995616 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:03.195522 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:03.393250 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:03.594099 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:03.794146 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:03.992578 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:04.192952 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:04.394272 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:04.590990 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:04.793564 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:04.999065 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:05.198702 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:05.393334 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0311 14:01:05.595167 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0311 14:01:05.595489 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:05.792443 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:05.993842 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:06.192688 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:06.393240 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0311 14:01:06.603690 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:06.794756 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:06.993329 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:07.192618 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:07.392939 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:07.592398 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:07.795028 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:07.997950 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:08.192085 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0311 14:01:08.393493 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:08.593934 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:08.793057 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:08.993030 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:09.191294 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0311 14:01:09.396845 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:09.594341 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0311 14:01:09.792829 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:09.995100 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:10.194925 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:10.391678 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:10.594227 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:10.793815 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:10.995003 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:11.193807 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:11.398887 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:11.591503 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:11.795537 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:11.994229 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:12.190336 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:12.390760 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:12.590531 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:12.789784 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:12.992722 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:13.190329 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:13.391799 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:13.590848 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:13.794932 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:13.991153 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:14.190283 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:14.392659 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:14.592606 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:14.791031 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:14.993448 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:15.191014 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:15.390135 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:15.590176 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0311 14:01:32.623188 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0311 14:01:33.850320 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0311 14:01:33.862617 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0311 14:01:41.030434 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0311 14:01:41.032438 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0311 14:02:21.949505 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0311 14:03:09.024891 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0311 14:05:38.859558 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.366490 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.436267 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.486886 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.546229 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.565340 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.642243 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.669421 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0311 14:05:43.684266 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0311 14:06:07.474786 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0311 14:06:18.759090 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0311 14:06:40.906151 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0311 14:06:44.573567 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0311 14:06:44.674124 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0311 14:06:44.778245 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0311 14:06:44.877944 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0311 14:06:44.979099 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0311 14:06:45.089788 1 configmap.go:109] updating configmap open-cluster-management-2ovi6kukph2dn9f582ta9gknbc93k080/config-service-cabundle with the service signing CA bundle I0311 14:06:45.183144 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0311 14:06:45.279203 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0311 14:06:45.376560 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0311 14:06:45.475636 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0311 14:06:45.574056 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0311 14:06:45.674987 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0311 14:06:45.773774 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0311 14:06:45.874199 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0311 14:06:46.018663 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W0311 14:21:01.385937 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"