W0331 04:01:45.961789 1 cmd.go:257] Using insecure, self-signed certificates I0331 04:01:45.962256 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1774929705 cert, and key in /tmp/serving-cert-311611091/serving-signer.crt, /tmp/serving-cert-311611091/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1774929705" is unset, resetting to 157680000000000000 years! I0331 04:01:46.805681 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0331 04:01:46.805995 1 observer_polling.go:159] Starting file observer I0331 04:01:46.806053 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0331 04:01:46.806066 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0331 04:01:46.806070 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0331 04:01:46.806074 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0331 04:01:46.829614 1 builder.go:304] service-ca-controller version - I0331 04:01:46.830347 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-311611091/tls.crt::/tmp/serving-cert-311611091/tls.key" I0331 04:01:47.511554 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0331 04:01:47.516928 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0331 04:01:47.516943 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0331 04:01:47.516966 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0331 04:01:47.516973 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0331 04:01:47.520465 1 secure_serving.go:57] Forcing use of http/1.1 only I0331 04:01:47.520476 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0331 04:01:47.520487 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0331 04:01:47.520492 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0331 04:01:47.520495 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0331 04:01:47.520498 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0331 04:01:47.520501 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0331 04:01:47.520505 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0331 04:01:47.524937 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0331 04:01:47.524970 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0331 04:01:47.525005 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0331 04:01:47.525021 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0331 04:01:47.525025 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0331 04:01:47.525048 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0331 04:01:47.525239 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-311611091/tls.crt::/tmp/serving-cert-311611091/tls.key" I0331 04:01:47.525364 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-311611091/tls.crt::/tmp/serving-cert-311611091/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774929705\" (2026-03-31 04:01:45 +0000 UTC to 2026-03-31 04:01:46 +0000 UTC (now=2026-03-31 04:01:47.52532612 +0000 UTC))" I0331 04:01:47.525519 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774929707\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774929707\" (2026-03-31 03:01:46 +0000 UTC to 2027-03-31 03:01:46 +0000 UTC (now=2026-03-31 04:01:47.525505072 +0000 UTC))" I0331 04:01:47.525535 1 secure_serving.go:213] Serving securely on [::]:8443 I0331 04:01:47.525552 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0331 04:01:47.525551 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0331 04:01:47.525689 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0331 04:01:47.527989 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.528051 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.528416 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.537859 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0331 04:01:47.537897 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"687cc8a6-1f7e-4d8a-ad7a-56c527b51c19", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9473", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-t4s2m_16a5622c-1675-4c21-948a-a4cce5345cb8 became leader I0331 04:01:47.539903 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0331 04:01:47.539917 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0331 04:01:47.539929 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0331 04:01:47.539920 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0331 04:01:47.539935 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0331 04:01:47.540025 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0331 04:01:47.540316 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0331 04:01:47.540537 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0331 04:01:47.540602 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0331 04:01:47.544209 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.544235 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.544287 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.552484 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.611642 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.625136 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0331 04:01:47.625148 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0331 04:01:47.625138 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0331 04:01:47.625478 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-03-31 03:49:58 +0000 UTC to 2036-03-28 03:49:58 +0000 UTC (now=2026-03-31 04:01:47.625453412 +0000 UTC))" I0331 04:01:47.625503 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-03-31 03:50:01 +0000 UTC to 2036-03-28 03:50:01 +0000 UTC (now=2026-03-31 04:01:47.625492573 +0000 UTC))" I0331 04:01:47.625520 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-03-31 03:50:03 +0000 UTC to 2036-03-28 03:50:03 +0000 UTC (now=2026-03-31 04:01:47.62551071 +0000 UTC))" I0331 04:01:47.625538 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-03-31 03:50:05 +0000 UTC to 2036-03-28 03:50:05 +0000 UTC (now=2026-03-31 04:01:47.625528835 +0000 UTC))" I0331 04:01:47.625553 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-03-31 03:50:09 +0000 UTC to 2036-03-28 03:50:09 +0000 UTC (now=2026-03-31 04:01:47.625544119 +0000 UTC))" I0331 04:01:47.625569 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pcfa8c9vnjo834h2rmsfk75o9078tj0-kx-224cb52d7c_customer-system-admin-signer@1774929127\" [] issuer=\"\" (2026-03-31 03:52:07 +0000 UTC to 2026-04-07 03:52:08 +0000 UTC (now=2026-03-31 04:01:47.625559142 +0000 UTC))" I0331 04:01:47.625589 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pcfa8c9vnjo834h2rmsfk75o9078tj0-kx-224cb52d7c_sre-system-admin-signer@1774929127\" [] issuer=\"\" (2026-03-31 03:52:08 +0000 UTC to 2026-04-07 03:52:09 +0000 UTC (now=2026-03-31 04:01:47.625579365 +0000 UTC))" I0331 04:01:47.625612 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-31 03:49:53 +0000 UTC to 2036-03-28 03:49:53 +0000 UTC (now=2026-03-31 04:01:47.625596429 +0000 UTC))" I0331 04:01:47.625792 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-311611091/tls.crt::/tmp/serving-cert-311611091/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774929705\" (2026-03-31 04:01:45 +0000 UTC to 2026-03-31 04:01:46 +0000 UTC (now=2026-03-31 04:01:47.625781634 +0000 UTC))" I0331 04:01:47.625959 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774929707\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774929707\" (2026-03-31 03:01:46 +0000 UTC to 2027-03-31 03:01:46 +0000 UTC (now=2026-03-31 04:01:47.625948121 +0000 UTC))" I0331 04:01:47.640153 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0331 04:01:47.640169 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0331 04:01:47.640177 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0331 04:01:47.640180 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0331 04:01:47.640183 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0331 04:01:47.640179 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0331 04:01:47.640193 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0331 04:01:47.640200 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0331 04:01:47.640203 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0331 04:01:47.640180 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0331 04:01:47.640212 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0331 04:01:47.640217 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0331 04:01:47.640187 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0331 04:01:47.640220 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0331 04:01:47.640225 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0331 04:01:47.640206 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0331 04:01:47.640232 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0331 04:01:47.640237 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0331 04:01:47.640228 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0331 04:01:47.641315 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0331 04:01:47.641324 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0331 04:01:47.641329 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0331 04:01:47.641332 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0331 04:01:47.641335 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0331 04:01:47.641338 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0331 04:01:47.641387 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0331 04:01:47.641398 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0331 04:01:47.641402 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0331 04:01:47.641407 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0331 04:01:47.641410 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0331 04:01:47.641413 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0331 04:01:47.672463 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.739989 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0331 04:01:47.740006 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0331 04:01:47.740013 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0331 04:01:47.740017 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0331 04:01:47.740020 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0331 04:01:47.740022 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0331 04:01:47.740046 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.740082 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.740099 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.740124 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.740130 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.740148 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0331 04:01:47.740169 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0331 04:01:47.740179 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0331 04:01:47.740186 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0331 04:01:47.740192 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0331 04:01:47.740198 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0331 04:01:47.754670 1 configmap.go:109] updating configmap open-cluster-management-2pcfa8c9vnjo834h2rmsfk75o9078tj0/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.754684 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.760179 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.762912 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.763140 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.770115 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0331 04:01:47.776278 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0331 04:01:47.776361 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.776439 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.782081 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.783270 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:47.840109 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0331 04:01:47.840135 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0331 04:01:47.840148 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0331 04:01:47.840152 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0331 04:01:47.840159 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0331 04:01:47.840163 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0331 04:01:47.840190 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0331 04:01:47.840198 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0331 04:01:47.951598 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:48.152645 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:48.358047 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:48.557261 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:48.750351 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:48.952153 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:49.150657 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:49.351772 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:49.552713 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:49.750469 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:49.950987 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:50.152201 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:50.350987 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:50.552163 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:50.750322 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:50.950476 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:51.151313 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:51.354634 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:51.552370 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:51.753638 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:51.952178 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:52.152153 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:52.350973 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:52.551115 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:52.752822 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0331 04:01:52.952488 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:53.153104 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:53.352977 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:53.553222 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:53.755236 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:53.952181 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:54.152701 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:54.352134 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:54.551743 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0331 04:01:54.752284 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:54.952103 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:55.150123 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:55.353005 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:55.551988 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0331 04:01:55.752508 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:55.952916 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0331 04:01:56.152613 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:56.363919 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:56.558967 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:56.751259 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:56.954168 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:57.153214 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:57.352210 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:57.551825 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:57.753886 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:57.952288 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:58.158161 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:58.352985 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:58.560986 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:58.750616 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:58.952904 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:59.151834 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:59.350534 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:59.551014 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:59.749406 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:01:59.949215 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:00.151205 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:00.350103 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:00.549076 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:00.748561 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:00.949985 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:01.149849 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:01.350314 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:01.551136 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:01.748793 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:01.950024 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0331 04:02:11.044431 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0331 04:09:31.350501 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0331 04:09:31.363152 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0331 04:09:36.552144 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0331 04:09:36.557194 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0331 04:10:16.498304 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0331 04:11:04.964666 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0331 04:15:49.010541 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.270474 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.281271 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.295848 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.306064 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.316064 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.333485 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.341972 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0331 04:15:52.354057 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0331 04:16:17.660396 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0331 04:16:44.021608 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0331 04:16:48.773097 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0331 04:16:52.542839 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0331 04:16:52.645213 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0331 04:16:52.746787 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0331 04:16:52.840325 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0331 04:16:52.943694 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0331 04:16:53.038945 1 configmap.go:109] updating configmap open-cluster-management-2pcfa8c9vnjo834h2rmsfk75o9078tj0/config-service-cabundle with the service signing CA bundle I0331 04:16:53.146116 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0331 04:16:53.237645 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0331 04:16:53.341707 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0331 04:16:53.439400 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0331 04:16:53.537713 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0331 04:16:53.637996 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0331 04:16:53.738892 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0331 04:16:53.836944 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0331 04:16:54.012999 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W0331 04:21:47.771570 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0331 04:21:51.319106 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:51.331077 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:51.351883 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:51.620040 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:51.820067 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:51.852262 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:51.922409 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:52.127914 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:52.449104 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0331 04:21:54.757014 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0331 04:21:54.805972 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0331 04:21:54.851864 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0331 04:21:54.951553 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0331 04:21:55.045331 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0331 04:21:57.043164 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0331 04:21:57.143714 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0331 04:21:57.242918 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0331 04:21:57.342342 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0331 04:33:48.338051 1 configmap.go:109] updating configmap default-tenant-managed/openshift-service-ca.crt with the service signing CA bundle I0331 04:33:49.808332 1 configmap.go:109] updating configmap default-tenant-managed/config-service-cabundle with the service signing CA bundle W0331 04:41:47.771564 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"