W0421 15:04:09.050789 1 cmd.go:257] Using insecure, self-signed certificates I0421 15:04:09.051007 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776783849 cert, and key in /tmp/serving-cert-4088074070/serving-signer.crt, /tmp/serving-cert-4088074070/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1776783849" is unset, resetting to 157680000000000000 years! I0421 15:04:09.540729 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0421 15:04:09.541009 1 observer_polling.go:159] Starting file observer I0421 15:04:09.541051 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0421 15:04:09.541065 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0421 15:04:09.541070 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0421 15:04:09.541074 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0421 15:04:09.574844 1 builder.go:304] service-ca-controller version - I0421 15:04:09.575473 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4088074070/tls.crt::/tmp/serving-cert-4088074070/tls.key" I0421 15:04:10.169066 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0421 15:04:10.176528 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0421 15:04:10.176540 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0421 15:04:10.176559 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0421 15:04:10.176566 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0421 15:04:10.180496 1 secure_serving.go:57] Forcing use of http/1.1 only I0421 15:04:10.180513 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0421 15:04:10.180520 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0421 15:04:10.180525 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0421 15:04:10.180529 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0421 15:04:10.180532 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0421 15:04:10.180534 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0421 15:04:10.180536 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0421 15:04:10.186140 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0421 15:04:10.186163 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0421 15:04:10.186161 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0421 15:04:10.186176 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0421 15:04:10.186178 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0421 15:04:10.186194 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0421 15:04:10.186413 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4088074070/tls.crt::/tmp/serving-cert-4088074070/tls.key" I0421 15:04:10.186505 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4088074070/tls.crt::/tmp/serving-cert-4088074070/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776783849\" (2026-04-21 15:04:08 +0000 UTC to 2026-04-21 15:04:09 +0000 UTC (now=2026-04-21 15:04:10.186483333 +0000 UTC))" I0421 15:04:10.186660 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776783850\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776783849\" (2026-04-21 14:04:09 +0000 UTC to 2027-04-21 14:04:09 +0000 UTC (now=2026-04-21 15:04:10.186646174 +0000 UTC))" I0421 15:04:10.186678 1 secure_serving.go:213] Serving securely on [::]:8443 I0421 15:04:10.186694 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0421 15:04:10.186698 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0421 15:04:10.187080 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0421 15:04:10.191216 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.191218 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.191216 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.201451 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0421 15:04:10.201504 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"91210a62-3009-4df3-8fe2-5334fe21647b", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11715", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-q5xxm_8c6b4540-8a0f-4083-96b4-267b22d7cdf6 became leader I0421 15:04:10.202406 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0421 15:04:10.202423 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0421 15:04:10.202434 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0421 15:04:10.202434 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0421 15:04:10.202442 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0421 15:04:10.202536 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0421 15:04:10.202826 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0421 15:04:10.202978 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0421 15:04:10.202982 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0421 15:04:10.216574 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.216603 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.216607 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.217931 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.259201 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.286312 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0421 15:04:10.286325 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0421 15:04:10.286339 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0421 15:04:10.286498 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-21 14:47:38 +0000 UTC to 2036-04-18 14:47:38 +0000 UTC (now=2026-04-21 15:04:10.28646338 +0000 UTC))" I0421 15:04:10.286682 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4088074070/tls.crt::/tmp/serving-cert-4088074070/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776783849\" (2026-04-21 15:04:08 +0000 UTC to 2026-04-21 15:04:09 +0000 UTC (now=2026-04-21 15:04:10.286669965 +0000 UTC))" I0421 15:04:10.286841 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776783850\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776783849\" (2026-04-21 14:04:09 +0000 UTC to 2027-04-21 14:04:09 +0000 UTC (now=2026-04-21 15:04:10.286830446 +0000 UTC))" I0421 15:04:10.286939 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-21 14:47:42 +0000 UTC to 2036-04-18 14:47:42 +0000 UTC (now=2026-04-21 15:04:10.286929249 +0000 UTC))" I0421 15:04:10.286958 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-21 14:47:44 +0000 UTC to 2036-04-18 14:47:44 +0000 UTC (now=2026-04-21 15:04:10.28695006 +0000 UTC))" I0421 15:04:10.286973 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-21 14:47:47 +0000 UTC to 2036-04-18 14:47:47 +0000 UTC (now=2026-04-21 15:04:10.286966007 +0000 UTC))" I0421 15:04:10.286987 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-21 14:47:48 +0000 UTC to 2036-04-18 14:47:48 +0000 UTC (now=2026-04-21 15:04:10.286979727 +0000 UTC))" I0421 15:04:10.287007 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-21 14:47:50 +0000 UTC to 2036-04-18 14:47:50 +0000 UTC (now=2026-04-21 15:04:10.286995077 +0000 UTC))" I0421 15:04:10.287023 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pqjtml22a4bmh59j970jdq3qrafr08j-kx-6ba181b698_customer-system-admin-signer@1776783007\" [] issuer=\"\" (2026-04-21 14:50:07 +0000 UTC to 2026-04-28 14:50:08 +0000 UTC (now=2026-04-21 15:04:10.287014004 +0000 UTC))" I0421 15:04:10.287044 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pqjtml22a4bmh59j970jdq3qrafr08j-kx-6ba181b698_sre-system-admin-signer@1776783007\" [] issuer=\"\" (2026-04-21 14:50:10 +0000 UTC to 2026-04-28 14:50:11 +0000 UTC (now=2026-04-21 15:04:10.287033027 +0000 UTC))" I0421 15:04:10.287059 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-21 14:47:38 +0000 UTC to 2036-04-18 14:47:38 +0000 UTC (now=2026-04-21 15:04:10.287052343 +0000 UTC))" I0421 15:04:10.287222 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4088074070/tls.crt::/tmp/serving-cert-4088074070/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776783849\" (2026-04-21 15:04:08 +0000 UTC to 2026-04-21 15:04:09 +0000 UTC (now=2026-04-21 15:04:10.28721284 +0000 UTC))" I0421 15:04:10.287364 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776783850\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776783849\" (2026-04-21 14:04:09 +0000 UTC to 2027-04-21 14:04:09 +0000 UTC (now=2026-04-21 15:04:10.287355403 +0000 UTC))" I0421 15:04:10.302474 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0421 15:04:10.302488 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0421 15:04:10.302534 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0421 15:04:10.302503 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0421 15:04:10.302550 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0421 15:04:10.302560 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0421 15:04:10.302536 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0421 15:04:10.302563 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0421 15:04:10.302585 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0421 15:04:10.302590 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0421 15:04:10.302571 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0421 15:04:10.302594 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0421 15:04:10.302593 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0421 15:04:10.302657 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0421 15:04:10.302663 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0421 15:04:10.302669 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0421 15:04:10.302594 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0421 15:04:10.302606 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0421 15:04:10.302991 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0421 15:04:10.303503 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0421 15:04:10.303514 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0421 15:04:10.303521 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0421 15:04:10.303523 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0421 15:04:10.303526 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0421 15:04:10.303529 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0421 15:04:10.303541 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0421 15:04:10.303545 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0421 15:04:10.303548 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0421 15:04:10.303551 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0421 15:04:10.303553 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0421 15:04:10.303556 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0421 15:04:10.304206 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.377211 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 15:04:10.402818 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0421 15:04:10.402830 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0421 15:04:10.402840 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0421 15:04:10.402834 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 15:04:10.402851 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0421 15:04:10.402865 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0421 15:04:10.402865 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.402872 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0421 15:04:10.402846 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0421 15:04:10.402877 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0421 15:04:10.402881 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0421 15:04:10.402883 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0421 15:04:10.402889 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0421 15:04:10.402897 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.402920 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0421 15:04:10.402885 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... W0421 15:04:10.402932 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0421 15:04:10.402942 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0421 15:04:10.402964 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.402969 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.402857 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 15:04:10.402992 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.403004 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 15:04:10.403011 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 15:04:10.403018 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 15:04:10.414550 1 configmap.go:109] updating configmap open-cluster-management-2pqjtml22a4bmh59j970jdq3qrafr08j/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.418126 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.418139 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.418181 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.419513 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.430128 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0421 15:04:10.433129 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.433276 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.437152 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.437233 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.615909 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:10.826556 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:11.018857 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:11.223201 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:11.417957 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:11.616440 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:11.816238 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:12.016571 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:12.216487 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:12.415557 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:12.627398 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:12.815582 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:13.015623 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:13.222161 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:13.420999 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:13.616400 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:13.818826 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:14.025680 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:14.216574 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:14.419421 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0421 15:04:14.615406 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0421 15:04:14.619060 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:14.816363 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:15.017833 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:15.219560 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:15.417425 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0421 15:04:15.616853 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:15.816353 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:16.016476 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:16.215614 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:16.416224 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:16.636024 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:16.829235 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:17.019675 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:17.216327 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0421 15:04:17.415966 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:17.616155 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:17.819746 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:18.021542 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:18.222700 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0421 15:04:18.420784 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:18.619086 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0421 15:04:18.819584 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:19.019046 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:19.218601 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:19.416381 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:19.617915 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:19.819024 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:20.015725 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:20.219137 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:20.415765 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:20.615126 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:20.815984 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:21.023350 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:21.217985 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:21.421425 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:21.618731 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:21.821275 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:22.017613 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:22.216488 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:22.415717 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:22.614508 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:22.814672 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:23.015561 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:23.214879 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:23.417162 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:23.615692 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:23.818422 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:24.014450 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:24.215152 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:24.413896 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:24.615657 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0421 15:04:38.487718 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0421 15:04:38.499614 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0421 15:04:42.681716 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0421 15:04:42.681727 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0421 15:05:03.410197 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0421 15:05:13.520384 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0421 15:07:29.709519 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0421 15:10:53.498232 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.540318 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.552184 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.564948 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.579582 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.591936 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.612484 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.631361 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:10:57.648621 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:39.562631 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:44.024317 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:47.469597 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:47.558482 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0421 15:11:47.662127 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:47.761373 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0421 15:11:47.860054 1 configmap.go:109] updating configmap open-cluster-management-2pqjtml22a4bmh59j970jdq3qrafr08j/config-service-cabundle with the service signing CA bundle I0421 15:11:47.959713 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0421 15:11:48.060827 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:48.157776 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:48.260449 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0421 15:11:48.360342 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0421 15:11:48.460550 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0421 15:11:48.558012 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0421 15:11:48.665002 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0421 15:11:48.857046 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W0421 15:24:10.378292 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"