W0420 11:46:37.528909       1 cmd.go:257] Using insecure, self-signed certificates
I0420 11:46:37.529136       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776685597 cert, and key in /tmp/serving-cert-1310483942/serving-signer.crt, /tmp/serving-cert-1310483942/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1776685597" is unset, resetting to 157680000000000000 years!
I0420 11:46:38.059149       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0420 11:46:38.059408       1 observer_polling.go:159] Starting file observer
I0420 11:46:38.059512       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0420 11:46:38.059525       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0420 11:46:38.059530       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0420 11:46:38.059534       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0420 11:46:38.086688       1 builder.go:304] service-ca-controller version -
I0420 11:46:38.087279       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1310483942/tls.crt::/tmp/serving-cert-1310483942/tls.key"
I0420 11:46:38.633550       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0420 11:46:38.641612       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0420 11:46:38.641629       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0420 11:46:38.641653       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0420 11:46:38.641660       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0420 11:46:38.644763       1 secure_serving.go:57] Forcing use of http/1.1 only
I0420 11:46:38.644771       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0420 11:46:38.644782       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0420 11:46:38.644788       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0420 11:46:38.644792       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0420 11:46:38.644795       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0420 11:46:38.644798       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0420 11:46:38.644800       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0420 11:46:38.650870       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0420 11:46:38.650910       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0420 11:46:38.650879       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0420 11:46:38.650935       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0420 11:46:38.650898       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0420 11:46:38.651083       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0420 11:46:38.652737       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1310483942/tls.crt::/tmp/serving-cert-1310483942/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776685597\" (2026-04-20 11:46:37 +0000 UTC to 2026-04-20 11:46:38 +0000 UTC (now=2026-04-20 11:46:38.652284022 +0000 UTC))"
I0420 11:46:38.652987       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776685598\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776685598\" (2026-04-20 10:46:38 +0000 UTC to 2027-04-20 10:46:38 +0000 UTC (now=2026-04-20 11:46:38.652965945 +0000 UTC))"
I0420 11:46:38.653023       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0420 11:46:38.653030       1 secure_serving.go:213] Serving securely on [::]:8443
I0420 11:46:38.653060       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0420 11:46:38.653200       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1310483942/tls.crt::/tmp/serving-cert-1310483942/tls.key"
I0420 11:46:38.653860       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0420 11:46:38.656599       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.656678       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.656765       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.666768       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0420 11:46:38.666808       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"01b4da8a-69a1-45ba-88aa-c9d3581c1c72", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11547", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-msbbh_1176e233-aed4-443f-8cdd-3c69875cd523 became leader
I0420 11:46:38.667826       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0420 11:46:38.667838       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0420 11:46:38.667866       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0420 11:46:38.667870       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0420 11:46:38.667877       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0420 11:46:38.667904       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0420 11:46:38.668351       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0420 11:46:38.668836       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0420 11:46:38.668852       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0420 11:46:38.672388       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.673671       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.673887       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.674921       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.751290       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0420 11:46:38.751298       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0420 11:46:38.751699       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:46 +0000 UTC to 2036-04-17 11:30:46 +0000 UTC (now=2026-04-20 11:46:38.751674894 +0000 UTC))"
I0420 11:46:38.751723       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:50 +0000 UTC to 2036-04-17 11:30:50 +0000 UTC (now=2026-04-20 11:46:38.751713503 +0000 UTC))"
I0420 11:46:38.751739       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:52 +0000 UTC to 2036-04-17 11:30:52 +0000 UTC (now=2026-04-20 11:46:38.75173045 +0000 UTC))"
I0420 11:46:38.751756       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:55 +0000 UTC to 2036-04-17 11:30:55 +0000 UTC (now=2026-04-20 11:46:38.75174756 +0000 UTC))"
I0420 11:46:38.751772       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:57 +0000 UTC to 2036-04-17 11:30:57 +0000 UTC (now=2026-04-20 11:46:38.751764172 +0000 UTC))"
I0420 11:46:38.751788       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtdr8jhjhlh62vg8sqlta0p1f7rfm-kx-a7d1ccf468_customer-system-admin-signer@1776684786\" [] issuer=\"<self>\" (2026-04-20 11:33:06 +0000 UTC to 2026-04-27 11:33:07 +0000 UTC (now=2026-04-20 11:46:38.751778489 +0000 UTC))"
I0420 11:46:38.751806       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtdr8jhjhlh62vg8sqlta0p1f7rfm-kx-a7d1ccf468_sre-system-admin-signer@1776684786\" [] issuer=\"<self>\" (2026-04-20 11:33:07 +0000 UTC to 2026-04-27 11:33:08 +0000 UTC (now=2026-04-20 11:46:38.751797088 +0000 UTC))"
I0420 11:46:38.751889       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0420 11:46:38.752042       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1310483942/tls.crt::/tmp/serving-cert-1310483942/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776685597\" (2026-04-20 11:46:37 +0000 UTC to 2026-04-20 11:46:38 +0000 UTC (now=2026-04-20 11:46:38.752029991 +0000 UTC))"
I0420 11:46:38.752205       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776685598\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776685598\" (2026-04-20 10:46:38 +0000 UTC to 2027-04-20 10:46:38 +0000 UTC (now=2026-04-20 11:46:38.752193601 +0000 UTC))"
I0420 11:46:38.752327       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:46 +0000 UTC to 2036-04-17 11:30:46 +0000 UTC (now=2026-04-20 11:46:38.752316619 +0000 UTC))"
I0420 11:46:38.752345       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:50 +0000 UTC to 2036-04-17 11:30:50 +0000 UTC (now=2026-04-20 11:46:38.752337339 +0000 UTC))"
I0420 11:46:38.752359       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:52 +0000 UTC to 2036-04-17 11:30:52 +0000 UTC (now=2026-04-20 11:46:38.752351919 +0000 UTC))"
I0420 11:46:38.752389       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:55 +0000 UTC to 2036-04-17 11:30:55 +0000 UTC (now=2026-04-20 11:46:38.752381071 +0000 UTC))"
I0420 11:46:38.752404       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:57 +0000 UTC to 2036-04-17 11:30:57 +0000 UTC (now=2026-04-20 11:46:38.752396755 +0000 UTC))"
I0420 11:46:38.752421       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtdr8jhjhlh62vg8sqlta0p1f7rfm-kx-a7d1ccf468_customer-system-admin-signer@1776684786\" [] issuer=\"<self>\" (2026-04-20 11:33:06 +0000 UTC to 2026-04-27 11:33:07 +0000 UTC (now=2026-04-20 11:46:38.75241077 +0000 UTC))"
I0420 11:46:38.752438       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtdr8jhjhlh62vg8sqlta0p1f7rfm-kx-a7d1ccf468_sre-system-admin-signer@1776684786\" [] issuer=\"<self>\" (2026-04-20 11:33:07 +0000 UTC to 2026-04-27 11:33:08 +0000 UTC (now=2026-04-20 11:46:38.75242968 +0000 UTC))"
I0420 11:46:38.752452       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-20 11:30:44 +0000 UTC to 2036-04-17 11:30:44 +0000 UTC (now=2026-04-20 11:46:38.752445337 +0000 UTC))"
I0420 11:46:38.752603       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1310483942/tls.crt::/tmp/serving-cert-1310483942/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776685597\" (2026-04-20 11:46:37 +0000 UTC to 2026-04-20 11:46:38 +0000 UTC (now=2026-04-20 11:46:38.752593824 +0000 UTC))"
I0420 11:46:38.752754       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776685598\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776685598\" (2026-04-20 10:46:38 +0000 UTC to 2027-04-20 10:46:38 +0000 UTC (now=2026-04-20 11:46:38.752740242 +0000 UTC))"
I0420 11:46:38.767876       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0420 11:46:38.767903       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0420 11:46:38.767909       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0420 11:46:38.767914       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0420 11:46:38.767916       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0420 11:46:38.767919       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0420 11:46:38.767958       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0420 11:46:38.767963       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0420 11:46:38.767976       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0420 11:46:38.767981       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0420 11:46:38.767987       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0420 11:46:38.767990       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0420 11:46:38.767993       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0420 11:46:38.767981       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0420 11:46:38.768014       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0420 11:46:38.768019       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0420 11:46:38.768025       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0420 11:46:38.768029       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0420 11:46:38.768059       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0420 11:46:38.770450       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.869026       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0420 11:46:38.869018       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0420 11:46:38.869042       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0420 11:46:38.869041       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0420 11:46:38.869050       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0420 11:46:38.869053       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0420 11:46:38.869055       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0420 11:46:38.869059       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0420 11:46:38.869064       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0420 11:46:38.869071       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0420 11:46:38.869059       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0420 11:46:38.869089       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0420 11:46:38.908290       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:38.968415       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0420 11:46:38.968427       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0420 11:46:38.968435       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0420 11:46:38.968439       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0420 11:46:38.968442       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0420 11:46:38.968445       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0420 11:46:38.968413       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0420 11:46:38.968463       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0420 11:46:38.968466       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0420 11:46:38.968468       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0420 11:46:38.968471       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0420 11:46:38.968474       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0420 11:46:38.968490       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.968518       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.968534       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.968558       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.968533       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.983181       1 configmap.go:109] updating configmap open-cluster-management-2pprtdr8jhjhlh62vg8sqlta0p1f7rfm/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.986936       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.986943       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.993336       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.993409       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:38.995382       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0420 11:46:39.003898       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.003965       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.010060       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.010121       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.102277       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0420 11:46:39.167988       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0420 11:46:39.168008       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0420 11:46:39.168017       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0420 11:46:39.168025       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0420 11:46:39.168030       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0420 11:46:39.168034       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0420 11:46:39.168064       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0420 11:46:39.168065       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0420 11:46:39.183196       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.380113       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.579428       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.786314       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:39.980476       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:40.178886       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:40.379031       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:40.578940       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:40.778684       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:40.980605       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:41.179533       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:41.379943       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:41.579416       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:41.780052       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:41.980169       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:42.179112       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:42.378747       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
W0420 11:46:42.480219       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0420 11:46:42.579524       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:42.778759       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:42.979884       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:43.180274       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:43.379459       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:43.578897       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:43.779649       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:43.979382       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0420 11:46:44.178804       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:44.378433       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:44.580638       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:44.787977       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:44.978772       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:45.177758       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:45.378131       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:45.578250       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:45.778178       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0420 11:46:45.979721       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:46.177945       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:46.378476       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:46.579430       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:46.779522       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0420 11:46:46.977821       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:47.178248       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0420 11:46:47.380674       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:47.579925       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:47.781685       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:47.978170       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:48.181630       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:48.378722       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:48.579227       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:48.780293       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:48.980535       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:49.177930       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:49.381026       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:49.581996       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:49.780805       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:49.978248       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:50.178058       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:50.380845       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:50.579433       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:50.778497       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:50.979503       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:51.178995       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:51.380936       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:51.580328       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:51.780808       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:51.978271       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:52.181876       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:52.385440       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:52.581927       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:52.780491       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:52.980672       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0420 11:46:53.180207       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0420 11:47:01.147143       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0420 11:47:07.338401       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0420 11:47:07.352023       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0420 11:47:11.517669       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0420 11:47:11.524076       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0420 11:47:48.398570       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0420 11:48:47.564691       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0420 11:51:22.078904       1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.108956       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.126781       1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.139334       1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.159034       1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.174513       1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.207572       1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.221254       1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:26.237160       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0420 11:51:50.398531       1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle
I0420 11:52:11.683931       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0420 11:52:17.181192       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0420 11:52:20.855290       1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle
I0420 11:52:20.951297       1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.054468       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.165657       1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.257917       1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.350200       1 configmap.go:109] updating configmap open-cluster-management-2pprtdr8jhjhlh62vg8sqlta0p1f7rfm/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.461299       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.550538       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.648871       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.754108       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.850432       1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle
I0420 11:52:21.950473       1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle
I0420 11:52:22.050523       1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle
I0420 11:52:22.149042       1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle
I0420 11:52:22.294329       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0420 11:56:10.861151       1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:10.874309       1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:10.895187       1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:10.914400       1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:11.550127       1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:11.992097       1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:12.203618       1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:12.203663       1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:12.392336       1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle
I0420 11:56:15.990864       1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle
I0420 11:56:16.048560       1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle
I0420 11:56:16.132243       1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle
I0420 11:56:16.221970       1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle
I0420 11:56:16.323028       1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle
I0420 11:56:16.422931       1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle
I0420 11:56:16.533725       1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle
I0420 11:56:18.346865       1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle
I0420 11:56:18.447716       1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle
I0420 11:58:13.105228       1 configmap.go:109] updating configmap default-managed-tenant-z0wye/openshift-service-ca.crt with the service signing CA bundle
I0420 11:58:14.315609       1 configmap.go:109] updating configmap default-managed-tenant-z0wye/config-service-cabundle with the service signing CA bundle
W0420 12:06:39.104313       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"