W0418 14:55:04.674909       1 cmd.go:257] Using insecure, self-signed certificates
I0418 14:55:04.675128       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776524104 cert, and key in /tmp/serving-cert-782871986/serving-signer.crt, /tmp/serving-cert-782871986/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1776524104" is unset, resetting to 157680000000000000 years!
I0418 14:55:04.788397       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0418 14:55:04.788685       1 observer_polling.go:159] Starting file observer
I0418 14:55:04.788743       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0418 14:55:04.788756       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0418 14:55:04.788762       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0418 14:55:04.788765       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0418 14:55:04.814366       1 builder.go:304] service-ca-controller version -
I0418 14:55:04.814995       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-782871986/tls.crt::/tmp/serving-cert-782871986/tls.key"
I0418 14:55:05.431694       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0418 14:55:05.437387       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0418 14:55:05.437402       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0418 14:55:05.437427       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0418 14:55:05.437434       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0418 14:55:05.440668       1 secure_serving.go:57] Forcing use of http/1.1 only
I0418 14:55:05.440680       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0418 14:55:05.440690       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0418 14:55:05.440695       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0418 14:55:05.440698       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0418 14:55:05.440702       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0418 14:55:05.440705       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0418 14:55:05.440707       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0418 14:55:05.445939       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0418 14:55:05.446086       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0418 14:55:05.446110       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0418 14:55:05.446119       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0418 14:55:05.446119       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0418 14:55:05.446134       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0418 14:55:05.446145       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0418 14:55:05.447377       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-782871986/tls.crt::/tmp/serving-cert-782871986/tls.key"
I0418 14:55:05.447730       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-782871986/tls.crt::/tmp/serving-cert-782871986/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776524104\" (2026-04-18 14:55:03 +0000 UTC to 2026-04-18 14:55:04 +0000 UTC (now=2026-04-18 14:55:05.447649945 +0000 UTC))"
I0418 14:55:05.447961       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776524105\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776524105\" (2026-04-18 13:55:04 +0000 UTC to 2027-04-18 13:55:04 +0000 UTC (now=2026-04-18 14:55:05.447939438 +0000 UTC))"
I0418 14:55:05.447993       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0418 14:55:05.448001       1 secure_serving.go:213] Serving securely on [::]:8443
I0418 14:55:05.448064       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0418 14:55:05.450216       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.450311       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.451209       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.457069       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0418 14:55:05.457119       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"92a894a1-b07d-420b-93af-be2de81cd9b9", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11690", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-m8qgs_ee443606-6df7-42e7-83ed-ffc2614dfadc became leader
I0418 14:55:05.458009       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0418 14:55:05.458022       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0418 14:55:05.458030       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0418 14:55:05.458039       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0418 14:55:05.458047       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0418 14:55:05.458132       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0418 14:55:05.458473       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0418 14:55:05.458684       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0418 14:55:05.458713       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0418 14:55:05.462587       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.463055       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.463936       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.464654       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.511290       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.546240       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0418 14:55:05.546257       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0418 14:55:05.546595       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:24 +0000 UTC to 2036-04-15 14:39:24 +0000 UTC (now=2026-04-18 14:55:05.546569444 +0000 UTC))"
I0418 14:55:05.546619       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:29 +0000 UTC to 2036-04-15 14:39:29 +0000 UTC (now=2026-04-18 14:55:05.546609645 +0000 UTC))"
I0418 14:55:05.546645       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:32 +0000 UTC to 2036-04-15 14:39:32 +0000 UTC (now=2026-04-18 14:55:05.54663696 +0000 UTC))"
I0418 14:55:05.546660       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:33 +0000 UTC to 2036-04-15 14:39:33 +0000 UTC (now=2026-04-18 14:55:05.546651801 +0000 UTC))"
I0418 14:55:05.546674       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:35 +0000 UTC to 2036-04-15 14:39:35 +0000 UTC (now=2026-04-18 14:55:05.546666377 +0000 UTC))"
I0418 14:55:05.546689       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pokgojp8lbl9musjri2502dflis12lj-kx-5612cd9e30_customer-system-admin-signer@1776523275\" [] issuer=\"<self>\" (2026-04-18 14:41:17 +0000 UTC to 2026-04-25 14:41:18 +0000 UTC (now=2026-04-18 14:55:05.54668008 +0000 UTC))"
I0418 14:55:05.546704       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pokgojp8lbl9musjri2502dflis12lj-kx-5612cd9e30_sre-system-admin-signer@1776523275\" [] issuer=\"<self>\" (2026-04-18 14:41:16 +0000 UTC to 2026-04-25 14:41:17 +0000 UTC (now=2026-04-18 14:55:05.546695842 +0000 UTC))"
I0418 14:55:05.546891       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-782871986/tls.crt::/tmp/serving-cert-782871986/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776524104\" (2026-04-18 14:55:03 +0000 UTC to 2026-04-18 14:55:04 +0000 UTC (now=2026-04-18 14:55:05.54688025 +0000 UTC))"
I0418 14:55:05.547057       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776524105\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776524105\" (2026-04-18 13:55:04 +0000 UTC to 2027-04-18 13:55:04 +0000 UTC (now=2026-04-18 14:55:05.547046083 +0000 UTC))"
I0418 14:55:05.547080       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0418 14:55:05.547255       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:24 +0000 UTC to 2036-04-15 14:39:24 +0000 UTC (now=2026-04-18 14:55:05.547243439 +0000 UTC))"
I0418 14:55:05.547283       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:29 +0000 UTC to 2036-04-15 14:39:29 +0000 UTC (now=2026-04-18 14:55:05.547265443 +0000 UTC))"
I0418 14:55:05.547302       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:32 +0000 UTC to 2036-04-15 14:39:32 +0000 UTC (now=2026-04-18 14:55:05.547291892 +0000 UTC))"
I0418 14:55:05.547317       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:33 +0000 UTC to 2036-04-15 14:39:33 +0000 UTC (now=2026-04-18 14:55:05.547309486 +0000 UTC))"
I0418 14:55:05.547345       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:35 +0000 UTC to 2036-04-15 14:39:35 +0000 UTC (now=2026-04-18 14:55:05.547337151 +0000 UTC))"
I0418 14:55:05.547360       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pokgojp8lbl9musjri2502dflis12lj-kx-5612cd9e30_customer-system-admin-signer@1776523275\" [] issuer=\"<self>\" (2026-04-18 14:41:17 +0000 UTC to 2026-04-25 14:41:18 +0000 UTC (now=2026-04-18 14:55:05.547351912 +0000 UTC))"
I0418 14:55:05.547377       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pokgojp8lbl9musjri2502dflis12lj-kx-5612cd9e30_sre-system-admin-signer@1776523275\" [] issuer=\"<self>\" (2026-04-18 14:41:16 +0000 UTC to 2026-04-25 14:41:17 +0000 UTC (now=2026-04-18 14:55:05.547368329 +0000 UTC))"
I0418 14:55:05.547393       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-18 14:39:23 +0000 UTC to 2036-04-15 14:39:23 +0000 UTC (now=2026-04-18 14:55:05.547385846 +0000 UTC))"
I0418 14:55:05.547552       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-782871986/tls.crt::/tmp/serving-cert-782871986/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776524104\" (2026-04-18 14:55:03 +0000 UTC to 2026-04-18 14:55:04 +0000 UTC (now=2026-04-18 14:55:05.547542478 +0000 UTC))"
I0418 14:55:05.547719       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776524105\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776524105\" (2026-04-18 13:55:04 +0000 UTC to 2027-04-18 13:55:04 +0000 UTC (now=2026-04-18 14:55:05.547708875 +0000 UTC))"
I0418 14:55:05.548592       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.558047       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0418 14:55:05.558057       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0418 14:55:05.558063       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0418 14:55:05.558067       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0418 14:55:05.558071       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0418 14:55:05.558073       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0418 14:55:05.558097       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.558134       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0418 14:55:05.558148       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0418 14:55:05.558149       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.558164       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.558173       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0418 14:55:05.558184       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0418 14:55:05.558132       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.558203       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0418 14:55:05.558212       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0418 14:55:05.558218       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0418 14:55:05.558212       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0418 14:55:05.558226       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0418 14:55:05.558237       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0418 14:55:05.558244       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0418 14:55:05.558250       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0418 14:55:05.558252       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0418 14:55:05.558261       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0418 14:55:05.558153       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0418 14:55:05.558188       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.558276       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0418 14:55:05.558223       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0418 14:55:05.558815       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0418 14:55:05.558835       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0418 14:55:05.558266       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0418 14:55:05.558870       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0418 14:55:05.558842       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0418 14:55:05.558914       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0418 14:55:05.558257       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0418 14:55:05.558928       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0418 14:55:05.558943       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0418 14:55:05.558950       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0418 14:55:05.558934       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0418 14:55:05.558874       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0418 14:55:05.559088       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0418 14:55:05.558994       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0418 14:55:05.559099       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0418 14:55:05.559107       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0418 14:55:05.559112       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0418 14:55:05.559116       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0418 14:55:05.559121       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0418 14:55:05.559133       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0418 14:55:05.569180       1 configmap.go:109] updating configmap open-cluster-management-2pokgojp8lbl9musjri2502dflis12lj/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.576877       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.582555       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.582580       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.582636       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.584502       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0418 14:55:05.588575       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.593211       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.598538       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.621421       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0418 14:55:05.658103       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0418 14:55:05.658121       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0418 14:55:05.658129       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0418 14:55:05.658132       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0418 14:55:05.658135       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0418 14:55:05.658139       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0418 14:55:05.658161       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0418 14:55:05.658185       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0418 14:55:05.670176       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:05.872797       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:06.075958       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:06.275893       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:06.471151       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:06.671105       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:06.872160       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:07.070585       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:07.270920       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:07.471446       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:07.671395       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:07.870484       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:08.084550       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:08.271817       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:08.472098       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:08.672676       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:08.871981       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:09.071826       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:09.272018       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:09.474485       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
W0418 14:55:09.669686       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0418 14:55:09.672981       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:09.872908       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:10.076064       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:10.270173       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:10.472313       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:10.672237       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0418 14:55:10.871315       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:11.074615       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:11.271763       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:11.467504       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:11.669852       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:11.871991       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:12.071459       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:12.269078       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:12.475365       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0418 14:55:12.671598       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:12.871711       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:13.071908       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:13.272373       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:13.469309       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0418 14:55:13.672260       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:13.872529       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0418 14:55:14.072675       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:14.280012       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:14.471560       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:14.671965       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:14.874103       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:15.074681       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:15.273699       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:15.472173       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:15.673480       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:15.872510       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:16.071238       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:16.271924       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:16.472176       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:16.672612       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:16.878660       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:17.074414       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:17.274649       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:17.474659       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:17.667309       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:17.867980       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:18.070639       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:18.270303       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:18.469698       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:18.669733       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:18.870254       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:19.070857       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:19.273921       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:19.470401       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:19.670288       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:19.870666       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0418 14:55:31.625965       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0418 14:55:37.420028       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0418 14:55:37.436413       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0418 14:55:43.609601       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0418 14:55:43.612377       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0418 14:56:20.896168       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0418 14:59:30.895417       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0418 15:06:37.193671       1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.180449       1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.195517       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.213318       1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.225455       1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.242274       1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.263878       1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.281507       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 15:06:41.291344       1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle
I0418 15:07:17.275681       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0418 15:07:26.143657       1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle
I0418 15:07:40.716964       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0418 15:07:44.390684       1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle
I0418 15:07:44.494725       1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle
I0418 15:07:44.584756       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0418 15:07:44.684567       1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle
I0418 15:07:44.789712       1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle
I0418 15:07:44.886124       1 configmap.go:109] updating configmap open-cluster-management-2pokgojp8lbl9musjri2502dflis12lj/config-service-cabundle with the service signing CA bundle
I0418 15:07:44.987580       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.085300       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.186699       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.285117       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.384881       1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.485962       1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.584758       1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.685008       1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle
I0418 15:07:45.814729       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0418 15:11:25.908900       1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:25.930060       1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:25.941988       1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:25.958678       1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:26.197655       1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:26.382716       1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:26.470567       1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:26.609701       1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:27.977069       1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle
I0418 15:11:29.897300       1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle
I0418 15:11:29.982931       1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle
I0418 15:11:30.048518       1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle
I0418 15:11:30.166284       1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle
I0418 15:11:30.339419       1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle
I0418 15:11:30.470041       1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle
I0418 15:11:30.568255       1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle
I0418 15:11:30.683070       1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle
I0418 15:11:32.107231       1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle
I0418 15:13:27.616926       1 configmap.go:109] updating configmap default-managed-tenant-dmgvu/openshift-service-ca.crt with the service signing CA bundle
I0418 15:13:28.825125       1 configmap.go:109] updating configmap default-managed-tenant-dmgvu/config-service-cabundle with the service signing CA bundle
W0418 15:15:05.622909       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
W0418 15:35:05.623710       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"