W0430 13:50:09.731087 1 cmd.go:257] Using insecure, self-signed certificates I0430 13:50:09.731310 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777557009 cert, and key in /tmp/serving-cert-3764602238/serving-signer.crt, /tmp/serving-cert-3764602238/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777557009" is unset, resetting to 157680000000000000 years! I0430 13:50:10.130710 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0430 13:50:10.131019 1 observer_polling.go:159] Starting file observer I0430 13:50:10.131089 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0430 13:50:10.131104 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0430 13:50:10.131108 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0430 13:50:10.131113 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0430 13:50:10.165599 1 builder.go:304] service-ca-controller version - I0430 13:50:10.166304 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3764602238/tls.crt::/tmp/serving-cert-3764602238/tls.key" I0430 13:50:10.497486 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0430 13:50:10.504149 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0430 13:50:10.504165 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0430 13:50:10.504187 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0430 13:50:10.504192 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0430 13:50:10.507406 1 secure_serving.go:57] Forcing use of http/1.1 only I0430 13:50:10.507418 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0430 13:50:10.507424 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0430 13:50:10.507429 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0430 13:50:10.507434 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0430 13:50:10.507437 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0430 13:50:10.507439 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0430 13:50:10.507441 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0430 13:50:10.511595 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0430 13:50:10.511594 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0430 13:50:10.511605 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0430 13:50:10.511634 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0430 13:50:10.511634 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0430 13:50:10.511635 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0430 13:50:10.511878 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3764602238/tls.crt::/tmp/serving-cert-3764602238/tls.key" I0430 13:50:10.511950 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3764602238/tls.crt::/tmp/serving-cert-3764602238/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777557009\" (2026-04-30 13:50:09 +0000 UTC to 2026-04-30 13:50:10 +0000 UTC (now=2026-04-30 13:50:10.511917972 +0000 UTC))" I0430 13:50:10.512143 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777557010\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777557010\" (2026-04-30 12:50:10 +0000 UTC to 2027-04-30 12:50:10 +0000 UTC (now=2026-04-30 13:50:10.512126721 +0000 UTC))" I0430 13:50:10.512163 1 secure_serving.go:213] Serving securely on [::]:8443 I0430 13:50:10.512184 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0430 13:50:10.512269 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0430 13:50:10.513022 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0430 13:50:10.514262 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.514261 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.514261 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.524031 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0430 13:50:10.524090 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"adeb6e13-742e-4c98-896b-24f421a19146", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11590", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-8vppv_32475911-68ef-45ff-9efc-00171ae6d056 became leader I0430 13:50:10.525025 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0430 13:50:10.525037 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0430 13:50:10.525046 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0430 13:50:10.525069 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0430 13:50:10.525076 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0430 13:50:10.525925 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0430 13:50:10.527073 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0430 13:50:10.527336 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0430 13:50:10.527411 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0430 13:50:10.532111 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.532206 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.532649 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.537016 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.611815 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0430 13:50:10.611836 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0430 13:50:10.611822 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0430 13:50:10.612009 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-30 13:34:07 +0000 UTC to 2036-04-27 13:34:07 +0000 UTC (now=2026-04-30 13:50:10.611983881 +0000 UTC))" I0430 13:50:10.612221 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3764602238/tls.crt::/tmp/serving-cert-3764602238/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777557009\" (2026-04-30 13:50:09 +0000 UTC to 2026-04-30 13:50:10 +0000 UTC (now=2026-04-30 13:50:10.612207929 +0000 UTC))" I0430 13:50:10.612391 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777557010\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777557010\" (2026-04-30 12:50:10 +0000 UTC to 2027-04-30 12:50:10 +0000 UTC (now=2026-04-30 13:50:10.612379323 +0000 UTC))" I0430 13:50:10.612497 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-30 13:34:09 +0000 UTC to 2036-04-27 13:34:09 +0000 UTC (now=2026-04-30 13:50:10.612485725 +0000 UTC))" I0430 13:50:10.612517 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-30 13:34:13 +0000 UTC to 2036-04-27 13:34:13 +0000 UTC (now=2026-04-30 13:50:10.612507467 +0000 UTC))" I0430 13:50:10.612536 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-30 13:34:15 +0000 UTC to 2036-04-27 13:34:15 +0000 UTC (now=2026-04-30 13:50:10.612523892 +0000 UTC))" I0430 13:50:10.612552 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-30 13:34:18 +0000 UTC to 2036-04-27 13:34:18 +0000 UTC (now=2026-04-30 13:50:10.61254364 +0000 UTC))" I0430 13:50:10.612566 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-30 13:34:21 +0000 UTC to 2036-04-27 13:34:21 +0000 UTC (now=2026-04-30 13:50:10.612558126 +0000 UTC))" I0430 13:50:10.612586 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q0gm1uuhr9q3qc032e51jb7af5qc9os-kx-e4843579a4_customer-system-admin-signer@1777556185\" [] issuer=\"\" (2026-04-30 13:36:29 +0000 UTC to 2026-05-07 13:36:30 +0000 UTC (now=2026-04-30 13:50:10.612575364 +0000 UTC))" I0430 13:50:10.612604 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q0gm1uuhr9q3qc032e51jb7af5qc9os-kx-e4843579a4_sre-system-admin-signer@1777556185\" [] issuer=\"\" (2026-04-30 13:36:26 +0000 UTC to 2026-05-07 13:36:27 +0000 UTC (now=2026-04-30 13:50:10.612595477 +0000 UTC))" I0430 13:50:10.612620 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-30 13:34:07 +0000 UTC to 2036-04-27 13:34:07 +0000 UTC (now=2026-04-30 13:50:10.612611926 +0000 UTC))" I0430 13:50:10.612774 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3764602238/tls.crt::/tmp/serving-cert-3764602238/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777557009\" (2026-04-30 13:50:09 +0000 UTC to 2026-04-30 13:50:10 +0000 UTC (now=2026-04-30 13:50:10.612763733 +0000 UTC))" I0430 13:50:10.612920 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777557010\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777557010\" (2026-04-30 12:50:10 +0000 UTC to 2027-04-30 12:50:10 +0000 UTC (now=2026-04-30 13:50:10.612910678 +0000 UTC))" I0430 13:50:10.625678 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0430 13:50:10.625702 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0430 13:50:10.625712 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0430 13:50:10.625719 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0430 13:50:10.625724 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0430 13:50:10.625729 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0430 13:50:10.625755 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0430 13:50:10.625775 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0430 13:50:10.625784 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0430 13:50:10.625788 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0430 13:50:10.625791 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0430 13:50:10.625794 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0430 13:50:10.625768 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0430 13:50:10.625814 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0430 13:50:10.625818 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0430 13:50:10.625821 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0430 13:50:10.625824 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0430 13:50:10.625827 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0430 13:50:10.625848 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0430 13:50:10.663565 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.727673 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0430 13:50:10.727687 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0430 13:50:10.727700 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0430 13:50:10.727704 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0430 13:50:10.727707 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0430 13:50:10.727712 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0430 13:50:10.727716 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0430 13:50:10.727719 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0430 13:50:10.727722 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0430 13:50:10.727712 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0430 13:50:10.727739 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0430 13:50:10.727742 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0430 13:50:10.792462 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:10.825405 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0430 13:50:10.825429 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0430 13:50:10.825436 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0430 13:50:10.825440 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0430 13:50:10.825444 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0430 13:50:10.825449 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0430 13:50:10.825487 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.825500 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.825503 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.825535 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.825554 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.825990 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0430 13:50:10.826003 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 13:50:10.826010 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 13:50:10.826015 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 13:50:10.826020 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 13:50:10.826025 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 13:50:10.852472 1 configmap.go:109] updating configmap open-cluster-management-2q0gm1uuhr9q3qc032e51jb7af5qc9os/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.852478 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.872420 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.872549 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.872592 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.882761 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0430 13:50:10.882897 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.906527 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.910794 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:10.913572 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:11.042312 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:11.065466 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 13:50:11.126026 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0430 13:50:11.126047 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0430 13:50:11.126066 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0430 13:50:11.126070 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0430 13:50:11.126075 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0430 13:50:11.126081 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... W0430 13:50:11.126124 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0430 13:50:11.126150 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0430 13:50:11.237603 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:11.435189 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:11.636073 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:11.842469 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:12.036546 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:12.237315 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:12.437487 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:12.635186 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:12.837665 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:13.034947 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:13.236352 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:13.436516 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:13.639261 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:13.836965 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:14.037079 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:14.235323 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:14.434785 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:14.638044 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:14.835107 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0430 13:50:14.937309 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0430 13:50:15.034391 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:15.238782 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:15.434935 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:15.634277 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:15.835200 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0430 13:50:16.035801 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:16.236192 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:16.434679 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:16.635084 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:16.836979 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:17.035859 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:17.235175 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:17.437844 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:17.637625 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0430 13:50:17.836171 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:18.036679 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:18.234475 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:18.436398 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:18.635319 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0430 13:50:18.837498 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:19.036148 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0430 13:50:19.239187 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:19.437298 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:19.635586 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:19.834681 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:20.038674 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:20.235621 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:20.436942 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:20.636535 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:20.835573 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:21.036957 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:21.234801 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:21.434837 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:21.636638 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:21.843603 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:22.038515 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:22.241103 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:22.434346 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:22.637175 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:22.836519 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:23.035025 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:23.237110 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:23.435830 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:23.636641 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:23.834224 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:24.034904 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:24.234846 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:24.440618 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:24.635013 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:24.837129 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:25.034573 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0430 13:50:36.558798 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0430 13:50:37.795806 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0430 13:50:37.807221 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0430 13:50:43.964423 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0430 13:50:43.975135 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0430 13:51:13.792442 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0430 13:55:45.440487 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0430 14:01:13.297136 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.093870 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.125902 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.134115 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.150388 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.166336 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.178361 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.187727 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:17.230484 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0430 14:01:51.471212 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0430 14:02:02.569662 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0430 14:02:10.768228 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0430 14:02:14.811340 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0430 14:02:14.931806 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0430 14:02:15.076149 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0430 14:02:15.210043 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0430 14:02:15.323288 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0430 14:02:15.413348 1 configmap.go:109] updating configmap open-cluster-management-2q0gm1uuhr9q3qc032e51jb7af5qc9os/config-service-cabundle with the service signing CA bundle I0430 14:02:15.517327 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0430 14:02:15.802575 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0430 14:02:16.073418 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0430 14:02:16.348273 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0430 14:02:16.787472 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0430 14:02:17.096305 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0430 14:02:17.270567 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0430 14:02:17.399869 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0430 14:02:19.104266 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0430 14:06:04.290344 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:04.313351 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:04.338454 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:04.391300 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:05.531440 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:05.844342 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:05.995638 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:06.136493 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:07.000276 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:07.220654 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0430 14:06:12.390308 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0430 14:06:12.500397 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0430 14:06:12.601226 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0430 14:06:12.699856 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0430 14:06:12.773484 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0430 14:06:12.843443 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0430 14:06:12.907320 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0430 14:06:13.014093 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0430 14:06:13.084931 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0430 14:06:14.659002 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle