W0506 07:38:16.979647 1 cmd.go:257] Using insecure, self-signed certificates I0506 07:38:16.979927 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778053096 cert, and key in /tmp/serving-cert-3521740959/serving-signer.crt, /tmp/serving-cert-3521740959/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1778053096" is unset, resetting to 157680000000000000 years! I0506 07:38:17.311402 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0506 07:38:17.311712 1 observer_polling.go:159] Starting file observer I0506 07:38:17.311763 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0506 07:38:17.311777 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0506 07:38:17.311782 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0506 07:38:17.311785 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0506 07:38:17.336082 1 builder.go:304] service-ca-controller version - I0506 07:38:17.336776 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3521740959/tls.crt::/tmp/serving-cert-3521740959/tls.key" I0506 07:38:17.645344 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0506 07:38:17.650637 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0506 07:38:17.650654 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0506 07:38:17.650675 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0506 07:38:17.650679 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0506 07:38:17.655509 1 secure_serving.go:57] Forcing use of http/1.1 only W0506 07:38:17.655535 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0506 07:38:17.655540 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0506 07:38:17.655543 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0506 07:38:17.655546 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0506 07:38:17.655549 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0506 07:38:17.655551 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0506 07:38:17.655517 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I0506 07:38:17.660068 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0506 07:38:17.660084 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0506 07:38:17.660104 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0506 07:38:17.660106 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0506 07:38:17.660122 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0506 07:38:17.660104 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0506 07:38:17.660383 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3521740959/tls.crt::/tmp/serving-cert-3521740959/tls.key" I0506 07:38:17.660472 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3521740959/tls.crt::/tmp/serving-cert-3521740959/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778053096\" (2026-05-06 07:38:16 +0000 UTC to 2026-05-06 07:38:17 +0000 UTC (now=2026-05-06 07:38:17.660445594 +0000 UTC))" I0506 07:38:17.660638 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778053097\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778053097\" (2026-05-06 06:38:17 +0000 UTC to 2027-05-06 06:38:17 +0000 UTC (now=2026-05-06 07:38:17.660622591 +0000 UTC))" I0506 07:38:17.660657 1 secure_serving.go:213] Serving securely on [::]:8443 I0506 07:38:17.660675 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0506 07:38:17.660685 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0506 07:38:17.660958 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0506 07:38:17.663091 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.663167 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.663838 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.674415 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0506 07:38:17.674580 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"013c339a-f3b5-4074-bf44-9e635a5b110a", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10590", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-ffv2j_6e4e1153-1dc0-4078-8624-14ff33bcbbbf became leader I0506 07:38:17.675738 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0506 07:38:17.675755 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0506 07:38:17.675777 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0506 07:38:17.675787 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0506 07:38:17.675803 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0506 07:38:17.675873 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0506 07:38:17.676239 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0506 07:38:17.676957 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0506 07:38:17.677047 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0506 07:38:17.686064 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.686139 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.686250 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.686296 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.740570 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.760697 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0506 07:38:17.760714 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0506 07:38:17.760723 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0506 07:38:17.760996 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-06 07:22:11 +0000 UTC to 2036-05-03 07:22:11 +0000 UTC (now=2026-05-06 07:38:17.760958568 +0000 UTC))" I0506 07:38:17.761315 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3521740959/tls.crt::/tmp/serving-cert-3521740959/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778053096\" (2026-05-06 07:38:16 +0000 UTC to 2026-05-06 07:38:17 +0000 UTC (now=2026-05-06 07:38:17.761283244 +0000 UTC))" I0506 07:38:17.761612 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778053097\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778053097\" (2026-05-06 06:38:17 +0000 UTC to 2027-05-06 06:38:17 +0000 UTC (now=2026-05-06 07:38:17.761588999 +0000 UTC))" I0506 07:38:17.761753 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-06 07:22:13 +0000 UTC to 2036-05-03 07:22:13 +0000 UTC (now=2026-05-06 07:38:17.761740797 +0000 UTC))" I0506 07:38:17.761780 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-06 07:22:17 +0000 UTC to 2036-05-03 07:22:17 +0000 UTC (now=2026-05-06 07:38:17.761765215 +0000 UTC))" I0506 07:38:17.761797 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-06 07:22:20 +0000 UTC to 2036-05-03 07:22:20 +0000 UTC (now=2026-05-06 07:38:17.761789437 +0000 UTC))" I0506 07:38:17.761812 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-06 07:22:20 +0000 UTC to 2036-05-03 07:22:20 +0000 UTC (now=2026-05-06 07:38:17.761804446 +0000 UTC))" I0506 07:38:17.761828 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-06 07:22:25 +0000 UTC to 2036-05-03 07:22:25 +0000 UTC (now=2026-05-06 07:38:17.761820327 +0000 UTC))" I0506 07:38:17.761847 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q49pdbn2k5bs7emt873shpqpjujrkvp-kx-3a1f1f9d54_customer-system-admin-signer@1778052292\" [] issuer=\"\" (2026-05-06 07:24:55 +0000 UTC to 2026-05-13 07:24:56 +0000 UTC (now=2026-05-06 07:38:17.761835142 +0000 UTC))" I0506 07:38:17.761870 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q49pdbn2k5bs7emt873shpqpjujrkvp-kx-3a1f1f9d54_sre-system-admin-signer@1778052292\" [] issuer=\"\" (2026-05-06 07:24:58 +0000 UTC to 2026-05-13 07:24:59 +0000 UTC (now=2026-05-06 07:38:17.761858113 +0000 UTC))" I0506 07:38:17.761887 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-06 07:22:11 +0000 UTC to 2036-05-03 07:22:11 +0000 UTC (now=2026-05-06 07:38:17.761879725 +0000 UTC))" I0506 07:38:17.762093 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3521740959/tls.crt::/tmp/serving-cert-3521740959/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778053096\" (2026-05-06 07:38:16 +0000 UTC to 2026-05-06 07:38:17 +0000 UTC (now=2026-05-06 07:38:17.762077609 +0000 UTC))" I0506 07:38:17.762358 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778053097\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778053097\" (2026-05-06 06:38:17 +0000 UTC to 2027-05-06 06:38:17 +0000 UTC (now=2026-05-06 07:38:17.762341233 +0000 UTC))" I0506 07:38:17.775898 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0506 07:38:17.775938 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0506 07:38:17.775943 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0506 07:38:17.775949 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0506 07:38:17.775953 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0506 07:38:17.775955 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0506 07:38:17.775956 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0506 07:38:17.775961 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0506 07:38:17.775965 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0506 07:38:17.775898 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0506 07:38:17.775987 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0506 07:38:17.775961 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0506 07:38:17.775996 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0506 07:38:17.775997 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0506 07:38:17.776000 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0506 07:38:17.776001 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0506 07:38:17.776020 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0506 07:38:17.776023 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0506 07:38:17.776026 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0506 07:38:17.777080 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0506 07:38:17.777101 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0506 07:38:17.777108 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0506 07:38:17.777113 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0506 07:38:17.777119 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0506 07:38:17.777123 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0506 07:38:17.777155 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0506 07:38:17.777164 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0506 07:38:17.777169 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0506 07:38:17.777174 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0506 07:38:17.777179 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0506 07:38:17.777183 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0506 07:38:17.799023 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.863994 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 07:38:17.876454 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0506 07:38:17.876472 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0506 07:38:17.876487 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0506 07:38:17.876496 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0506 07:38:17.876497 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0506 07:38:17.876508 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0506 07:38:17.876516 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0506 07:38:17.876521 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0506 07:38:17.876526 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0506 07:38:17.876540 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.876550 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0506 07:38:17.876501 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... W0506 07:38:17.876555 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0506 07:38:17.876609 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.876616 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0506 07:38:17.876619 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0506 07:38:17.876630 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0506 07:38:17.876635 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 07:38:17.876645 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 07:38:17.876649 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 07:38:17.876653 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 07:38:17.876658 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 07:38:17.876661 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.876693 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.876709 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.886003 1 configmap.go:109] updating configmap open-cluster-management-2q49pdbn2k5bs7emt873shpqpjujrkvp/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.895426 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.895433 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.900290 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.900291 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.903629 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0506 07:38:17.909758 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.913180 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.913683 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:17.916586 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:18.088991 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:18.296297 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:18.493019 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:18.688374 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:18.888343 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:19.090205 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:19.287127 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:19.489092 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:19.687932 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:19.889024 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:20.088504 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:20.289625 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:20.487234 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:20.688542 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:20.888157 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:21.088929 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:21.287867 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:21.489355 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:21.690005 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:21.887895 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:22.087086 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:22.290636 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:22.487534 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:22.686561 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:22.885959 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0506 07:38:23.088702 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:23.287255 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:23.491251 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:23.688060 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:23.887297 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:24.088479 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:24.290702 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:24.486930 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:24.688965 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0506 07:38:24.888518 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:25.089468 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:25.288468 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:25.490437 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:25.687161 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0506 07:38:25.888993 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:26.090620 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0506 07:38:26.290449 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:26.488562 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:26.687556 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:26.886595 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:27.089285 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:27.288668 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:27.490947 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:27.686370 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:27.890517 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:28.087338 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:28.290594 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:28.486978 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:28.687401 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:28.886721 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:29.091373 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:29.286714 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:29.487973 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:29.685711 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:29.888542 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:30.087303 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:30.295833 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:30.487241 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:30.690704 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:30.885732 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:31.089410 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:31.284967 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:31.489674 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:31.685390 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:31.887259 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0506 07:38:32.085446 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0506 07:39:00.890789 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0506 07:40:42.880627 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0506 07:40:42.892270 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0506 07:40:49.024687 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0506 07:40:49.024879 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0506 07:41:26.905738 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0506 07:44:35.932127 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0506 07:51:06.829486 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.492044 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.498960 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.510768 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.524786 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.529544 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.545232 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.554810 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:10.573289 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:33.013156 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0506 07:51:59.455169 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0506 07:52:07.083338 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0506 07:52:10.824957 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0506 07:52:10.927720 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0506 07:52:11.025974 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0506 07:52:11.125890 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0506 07:52:11.230508 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0506 07:52:11.322049 1 configmap.go:109] updating configmap open-cluster-management-2q49pdbn2k5bs7emt873shpqpjujrkvp/config-service-cabundle with the service signing CA bundle I0506 07:52:11.427967 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0506 07:52:11.529337 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0506 07:52:11.626123 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0506 07:52:11.742992 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0506 07:52:11.874783 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0506 07:52:12.023466 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0506 07:52:12.179718 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0506 07:52:12.395029 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0506 07:52:12.782342 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0506 07:56:04.036811 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.056373 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.071709 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.112269 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.279612 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.396793 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.482191 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.662375 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:04.879421 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:05.443359 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0506 07:56:10.899157 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0506 07:56:11.004656 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0506 07:56:11.123459 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0506 07:56:11.229223 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0506 07:56:11.337679 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0506 07:56:11.415599 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0506 07:56:11.531054 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0506 07:56:11.689219 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0506 07:56:11.773460 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0506 07:56:13.253197 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle W0506 07:58:17.866034 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0506 07:58:31.892133 1 configmap.go:109] updating configmap managed-tenant-hcb9u/openshift-service-ca.crt with the service signing CA bundle I0506 07:58:33.130691 1 configmap.go:109] updating configmap managed-tenant-hcb9u/config-service-cabundle with the service signing CA bundle W0506 08:18:17.865809 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"