W0504 20:37:52.052299 1 cmd.go:257] Using insecure, self-signed certificates I0504 20:37:52.052522 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777927072 cert, and key in /tmp/serving-cert-3683534850/serving-signer.crt, /tmp/serving-cert-3683534850/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777927072" is unset, resetting to 157680000000000000 years! I0504 20:37:52.641858 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0504 20:37:52.642212 1 observer_polling.go:159] Starting file observer I0504 20:37:52.642288 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0504 20:37:52.642308 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0504 20:37:52.642316 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0504 20:37:52.642325 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0504 20:37:52.665868 1 builder.go:304] service-ca-controller version - I0504 20:37:52.666554 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3683534850/tls.crt::/tmp/serving-cert-3683534850/tls.key" I0504 20:37:52.800789 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0504 20:37:52.806811 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0504 20:37:52.806825 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0504 20:37:52.806847 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0504 20:37:52.806852 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0504 20:37:52.809927 1 secure_serving.go:57] Forcing use of http/1.1 only I0504 20:37:52.809937 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0504 20:37:52.809944 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0504 20:37:52.809948 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0504 20:37:52.809952 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0504 20:37:52.809954 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0504 20:37:52.809957 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0504 20:37:52.809959 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0504 20:37:52.814643 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0504 20:37:52.814673 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0504 20:37:52.814695 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0504 20:37:52.814649 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0504 20:37:52.814723 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0504 20:37:52.814740 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0504 20:37:52.814740 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0504 20:37:52.815016 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3683534850/tls.crt::/tmp/serving-cert-3683534850/tls.key" I0504 20:37:52.815167 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3683534850/tls.crt::/tmp/serving-cert-3683534850/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777927072\" (2026-05-04 20:37:51 +0000 UTC to 2026-05-04 20:37:52 +0000 UTC (now=2026-05-04 20:37:52.815136685 +0000 UTC))" I0504 20:37:52.815337 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777927072\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777927072\" (2026-05-04 19:37:52 +0000 UTC to 2027-05-04 19:37:52 +0000 UTC (now=2026-05-04 20:37:52.815324375 +0000 UTC))" I0504 20:37:52.815355 1 secure_serving.go:213] Serving securely on [::]:8443 I0504 20:37:52.815371 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0504 20:37:52.815382 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0504 20:37:52.817089 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.817292 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.817391 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.824882 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0504 20:37:52.824956 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"7a766a02-a92f-4f84-8174-306986bd6242", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11303", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-zqks4_9aa49b36-e9dc-4afa-ab7f-192299892511 became leader I0504 20:37:52.825736 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0504 20:37:52.825753 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0504 20:37:52.825737 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0504 20:37:52.825766 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0504 20:37:52.825800 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0504 20:37:52.825858 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0504 20:37:52.826134 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0504 20:37:52.827436 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0504 20:37:52.827562 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0504 20:37:52.830188 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.830822 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.830871 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.838408 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.879655 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.914748 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0504 20:37:52.914772 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0504 20:37:52.914826 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0504 20:37:52.915188 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-04 20:22:45 +0000 UTC to 2036-05-01 20:22:45 +0000 UTC (now=2026-05-04 20:37:52.914960372 +0000 UTC))" I0504 20:37:52.915523 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3683534850/tls.crt::/tmp/serving-cert-3683534850/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777927072\" (2026-05-04 20:37:51 +0000 UTC to 2026-05-04 20:37:52 +0000 UTC (now=2026-05-04 20:37:52.915501874 +0000 UTC))" I0504 20:37:52.915775 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777927072\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777927072\" (2026-05-04 19:37:52 +0000 UTC to 2027-05-04 19:37:52 +0000 UTC (now=2026-05-04 20:37:52.915754895 +0000 UTC))" I0504 20:37:52.915956 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-04 20:22:47 +0000 UTC to 2036-05-01 20:22:47 +0000 UTC (now=2026-05-04 20:37:52.915937839 +0000 UTC))" I0504 20:37:52.915995 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-04 20:22:52 +0000 UTC to 2036-05-01 20:22:52 +0000 UTC (now=2026-05-04 20:37:52.915972363 +0000 UTC))" I0504 20:37:52.916023 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-04 20:22:54 +0000 UTC to 2036-05-01 20:22:54 +0000 UTC (now=2026-05-04 20:37:52.916009012 +0000 UTC))" I0504 20:37:52.916070 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-04 20:22:55 +0000 UTC to 2036-05-01 20:22:55 +0000 UTC (now=2026-05-04 20:37:52.916056134 +0000 UTC))" I0504 20:37:52.916097 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-04 20:23:03 +0000 UTC to 2036-05-01 20:23:03 +0000 UTC (now=2026-05-04 20:37:52.916083067 +0000 UTC))" I0504 20:37:52.916128 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3b1bh8gh1spjomjbca8fm0uu7d35bh-kx-cfb7dedb25_customer-system-admin-signer@1777926291\" [] issuer=\"\" (2026-05-04 20:24:50 +0000 UTC to 2026-05-11 20:24:51 +0000 UTC (now=2026-05-04 20:37:52.916112673 +0000 UTC))" I0504 20:37:52.916160 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3b1bh8gh1spjomjbca8fm0uu7d35bh-kx-cfb7dedb25_sre-system-admin-signer@1777926291\" [] issuer=\"\" (2026-05-04 20:24:51 +0000 UTC to 2026-05-11 20:24:52 +0000 UTC (now=2026-05-04 20:37:52.916143856 +0000 UTC))" I0504 20:37:52.916202 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-04 20:22:45 +0000 UTC to 2036-05-01 20:22:45 +0000 UTC (now=2026-05-04 20:37:52.916173898 +0000 UTC))" I0504 20:37:52.916471 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3683534850/tls.crt::/tmp/serving-cert-3683534850/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777927072\" (2026-05-04 20:37:51 +0000 UTC to 2026-05-04 20:37:52 +0000 UTC (now=2026-05-04 20:37:52.916453864 +0000 UTC))" I0504 20:37:52.916747 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777927072\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777927072\" (2026-05-04 19:37:52 +0000 UTC to 2027-05-04 19:37:52 +0000 UTC (now=2026-05-04 20:37:52.916728437 +0000 UTC))" I0504 20:37:52.922875 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:52.926105 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0504 20:37:52.926115 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0504 20:37:52.926123 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0504 20:37:52.926127 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0504 20:37:52.926129 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0504 20:37:52.926135 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0504 20:37:52.926123 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0504 20:37:52.926115 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0504 20:37:52.926151 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:37:52.926162 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:37:52.926167 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.926129 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0504 20:37:52.926197 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:37:52.926200 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0504 20:37:52.926201 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:37:52.926223 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:37:52.926160 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0504 20:37:52.926234 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0504 20:37:52.926221 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0504 20:37:52.926140 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0504 20:37:52.926236 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0504 20:37:52.926253 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0504 20:37:52.926255 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:37:52.926260 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0504 20:37:52.926263 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:37:52.926265 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0504 20:37:52.926268 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:37:52.926274 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:37:52.926279 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:37:52.926290 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.926319 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.926237 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0504 20:37:52.926335 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0504 20:37:52.926332 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.926343 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0504 20:37:52.926367 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.927682 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0504 20:37:52.927694 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0504 20:37:52.927701 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0504 20:37:52.927706 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0504 20:37:52.927710 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0504 20:37:52.927714 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0504 20:37:52.927767 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0504 20:37:52.927777 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0504 20:37:52.927783 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0504 20:37:52.927787 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0504 20:37:52.927789 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0504 20:37:52.927792 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0504 20:37:52.941576 1 configmap.go:109] updating configmap open-cluster-management-2q3b1bh8gh1spjomjbca8fm0uu7d35bh/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.944651 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.946115 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.946120 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.946180 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.956282 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0504 20:37:52.959865 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.961530 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.966908 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:52.988970 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:37:53.026081 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0504 20:37:53.026097 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0504 20:37:53.026104 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0504 20:37:53.026109 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0504 20:37:53.026113 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0504 20:37:53.026117 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0504 20:37:53.026148 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0504 20:37:53.026171 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0504 20:37:53.035311 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:53.241915 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:53.441081 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:53.640745 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:53.837174 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:54.038351 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:54.237023 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:54.440366 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:54.638052 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:54.839663 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:55.041013 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:55.238707 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:55.435016 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:55.644323 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:55.839360 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:56.039023 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:56.238479 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:56.439343 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:56.636695 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:56.839312 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:57.036119 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0504 20:37:57.247746 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0504 20:37:57.249494 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:57.436075 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:57.639423 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:57.833980 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:58.039481 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0504 20:37:58.236363 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:58.438649 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:58.638191 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:58.841142 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:59.039380 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:59.239407 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:59.434936 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:59.638471 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0504 20:37:59.838136 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0504 20:38:00.037595 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:00.253871 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:00.435570 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:00.634209 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:00.840148 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0504 20:38:01.039093 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:01.241812 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0504 20:38:01.438760 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:01.647105 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:01.836538 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:02.039479 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:02.238975 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:02.439832 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:02.637679 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:02.837787 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:03.038951 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:03.238559 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:03.438397 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:03.638536 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:03.838108 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:04.051218 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:04.237734 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:04.437551 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:04.637656 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:04.837640 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:05.038597 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:05.238931 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:05.437114 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:05.636951 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:05.837301 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:06.036475 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:06.235652 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:06.439678 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:06.639691 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:06.839639 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:07.034952 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:07.236923 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0504 20:38:14.492216 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0504 20:38:19.031293 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0504 20:38:19.049885 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0504 20:38:24.258049 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0504 20:38:24.258055 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0504 20:38:59.102638 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0504 20:40:15.279447 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0504 20:46:02.446325 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.488881 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.510643 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.532679 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.550527 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.565597 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.576403 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.591465 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:06.622612 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:30.858389 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:52.834628 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0504 20:47:14.104936 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0504 20:47:17.782216 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0504 20:47:17.884188 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:17.985531 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0504 20:47:18.084543 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:18.189242 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0504 20:47:18.283921 1 configmap.go:109] updating configmap open-cluster-management-2q3b1bh8gh1spjomjbca8fm0uu7d35bh/config-service-cabundle with the service signing CA bundle I0504 20:47:18.384207 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0504 20:47:18.481484 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:18.585731 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:18.681018 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0504 20:47:18.786966 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0504 20:47:18.881066 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0504 20:47:18.981780 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0504 20:47:19.082808 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0504 20:47:19.204568 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0504 20:50:59.213518 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:59.238346 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:59.282312 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:59.311095 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:59.605427 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:59.972694 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0504 20:51:00.239997 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0504 20:51:00.595508 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:51:01.038880 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0504 20:51:01.188592 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0504 20:51:04.412091 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0504 20:51:04.526504 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0504 20:51:04.620829 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0504 20:51:04.708743 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0504 20:51:04.809469 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0504 20:51:04.909618 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0504 20:51:05.009469 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0504 20:51:05.108610 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0504 20:51:05.209419 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0504 20:51:05.309057 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0504 20:53:03.819676 1 configmap.go:109] updating configmap managed-tenant-rb6s7/openshift-service-ca.crt with the service signing CA bundle I0504 20:53:05.295577 1 configmap.go:109] updating configmap managed-tenant-rb6s7/config-service-cabundle with the service signing CA bundle W0504 20:57:52.989574 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"