W0505 09:38:15.095150 1 cmd.go:257] Using insecure, self-signed certificates I0505 09:38:15.095408 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777973895 cert, and key in /tmp/serving-cert-214708909/serving-signer.crt, /tmp/serving-cert-214708909/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777973895" is unset, resetting to 157680000000000000 years! I0505 09:38:15.727106 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0505 09:38:15.727440 1 observer_polling.go:159] Starting file observer I0505 09:38:15.727938 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0505 09:38:15.727960 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0505 09:38:15.727968 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0505 09:38:15.727974 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0505 09:38:15.755781 1 builder.go:304] service-ca-controller version - I0505 09:38:15.756495 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-214708909/tls.crt::/tmp/serving-cert-214708909/tls.key" I0505 09:38:16.248239 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0505 09:38:16.254144 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0505 09:38:16.254158 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0505 09:38:16.254176 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0505 09:38:16.254182 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0505 09:38:16.257296 1 secure_serving.go:57] Forcing use of http/1.1 only I0505 09:38:16.257306 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0505 09:38:16.257317 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0505 09:38:16.257322 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0505 09:38:16.257327 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0505 09:38:16.257331 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0505 09:38:16.257334 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0505 09:38:16.257338 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0505 09:38:16.262950 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0505 09:38:16.262965 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0505 09:38:16.262976 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0505 09:38:16.262976 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0505 09:38:16.262989 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 09:38:16.262997 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 09:38:16.264740 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-214708909/tls.crt::/tmp/serving-cert-214708909/tls.key" I0505 09:38:16.265118 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-214708909/tls.crt::/tmp/serving-cert-214708909/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777973895\" (2026-05-05 09:38:14 +0000 UTC to 2026-05-05 09:38:15 +0000 UTC (now=2026-05-05 09:38:16.265076018 +0000 UTC))" I0505 09:38:16.265300 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777973896\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777973896\" (2026-05-05 08:38:15 +0000 UTC to 2027-05-05 08:38:15 +0000 UTC (now=2026-05-05 09:38:16.265285427 +0000 UTC))" I0505 09:38:16.265320 1 secure_serving.go:213] Serving securely on [::]:8443 I0505 09:38:16.265336 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0505 09:38:16.265358 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0505 09:38:16.265378 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0505 09:38:16.268387 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.268440 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.268699 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.277493 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0505 09:38:16.277543 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"5b9f4265-2f0e-4723-8cbd-748c6f329490", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11407", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-k8sjs_23361a0c-72c2-4dec-a926-782101892785 became leader I0505 09:38:16.278385 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0505 09:38:16.278387 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0505 09:38:16.278403 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0505 09:38:16.278409 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0505 09:38:16.278427 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0505 09:38:16.278503 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0505 09:38:16.278833 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0505 09:38:16.279286 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0505 09:38:16.279308 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0505 09:38:16.287478 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.287920 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.288002 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.288015 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.340505 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.363133 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 09:38:16.363152 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 09:38:16.363139 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0505 09:38:16.363337 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 09:22:23 +0000 UTC to 2036-05-02 09:22:23 +0000 UTC (now=2026-05-05 09:38:16.363310859 +0000 UTC))" I0505 09:38:16.363544 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-214708909/tls.crt::/tmp/serving-cert-214708909/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777973895\" (2026-05-05 09:38:14 +0000 UTC to 2026-05-05 09:38:15 +0000 UTC (now=2026-05-05 09:38:16.36353106 +0000 UTC))" I0505 09:38:16.363715 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777973896\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777973896\" (2026-05-05 08:38:15 +0000 UTC to 2027-05-05 08:38:15 +0000 UTC (now=2026-05-05 09:38:16.363702361 +0000 UTC))" I0505 09:38:16.363844 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-05 09:22:25 +0000 UTC to 2036-05-02 09:22:25 +0000 UTC (now=2026-05-05 09:38:16.3638341 +0000 UTC))" I0505 09:38:16.363863 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-05 09:22:29 +0000 UTC to 2036-05-02 09:22:29 +0000 UTC (now=2026-05-05 09:38:16.363855 +0000 UTC))" I0505 09:38:16.363880 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-05 09:22:31 +0000 UTC to 2036-05-02 09:22:31 +0000 UTC (now=2026-05-05 09:38:16.363871834 +0000 UTC))" I0505 09:38:16.363897 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-05 09:22:33 +0000 UTC to 2036-05-02 09:22:33 +0000 UTC (now=2026-05-05 09:38:16.363889229 +0000 UTC))" I0505 09:38:16.363911 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-05 09:22:34 +0000 UTC to 2036-05-02 09:22:34 +0000 UTC (now=2026-05-05 09:38:16.363903761 +0000 UTC))" I0505 09:38:16.363928 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3meumag9q14n7fvhs60ip3ci7t39g4-kx-e6a1035315_customer-system-admin-signer@1777973103\" [] issuer=\"\" (2026-05-05 09:25:03 +0000 UTC to 2026-05-12 09:25:04 +0000 UTC (now=2026-05-05 09:38:16.363918125 +0000 UTC))" I0505 09:38:16.363957 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3meumag9q14n7fvhs60ip3ci7t39g4-kx-e6a1035315_sre-system-admin-signer@1777973103\" [] issuer=\"\" (2026-05-05 09:25:04 +0000 UTC to 2026-05-12 09:25:05 +0000 UTC (now=2026-05-05 09:38:16.363937625 +0000 UTC))" I0505 09:38:16.363990 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 09:22:23 +0000 UTC to 2036-05-02 09:22:23 +0000 UTC (now=2026-05-05 09:38:16.363969276 +0000 UTC))" I0505 09:38:16.364147 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-214708909/tls.crt::/tmp/serving-cert-214708909/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777973895\" (2026-05-05 09:38:14 +0000 UTC to 2026-05-05 09:38:15 +0000 UTC (now=2026-05-05 09:38:16.364136684 +0000 UTC))" I0505 09:38:16.364320 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777973896\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777973896\" (2026-05-05 08:38:15 +0000 UTC to 2027-05-05 08:38:15 +0000 UTC (now=2026-05-05 09:38:16.364310448 +0000 UTC))" I0505 09:38:16.378462 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0505 09:38:16.378467 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0505 09:38:16.378486 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0505 09:38:16.378489 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0505 09:38:16.378493 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0505 09:38:16.378497 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0505 09:38:16.378498 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0505 09:38:16.378500 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0505 09:38:16.378502 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0505 09:38:16.378504 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0505 09:38:16.378505 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0505 09:38:16.378508 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0505 09:38:16.378486 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0505 09:38:16.378525 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0505 09:38:16.378530 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0505 09:38:16.378533 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0505 09:38:16.378536 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0505 09:38:16.378540 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0505 09:38:16.378554 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0505 09:38:16.379530 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0505 09:38:16.379551 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0505 09:38:16.379558 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0505 09:38:16.379561 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0505 09:38:16.379565 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0505 09:38:16.379567 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0505 09:38:16.379535 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0505 09:38:16.379630 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0505 09:38:16.379636 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0505 09:38:16.379641 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0505 09:38:16.379645 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0505 09:38:16.379650 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0505 09:38:16.383671 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.444861 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 09:38:16.479120 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0505 09:38:16.479143 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0505 09:38:16.479157 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 09:38:16.479164 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 09:38:16.479169 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 09:38:16.479173 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 09:38:16.479178 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 09:38:16.479145 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0505 09:38:16.479194 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0505 09:38:16.479199 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0505 09:38:16.479121 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0505 09:38:16.479228 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0505 09:38:16.479204 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0505 09:38:16.479239 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0505 09:38:16.479246 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0505 09:38:16.479234 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0505 09:38:16.479251 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.479262 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.479259 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.479245 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.479656 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0505 09:38:16.479672 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0505 09:38:16.479678 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0505 09:38:16.479702 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle W0505 09:38:16.479702 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0505 09:38:16.505487 1 configmap.go:109] updating configmap open-cluster-management-2q3meumag9q14n7fvhs60ip3ci7t39g4/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.506090 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.506175 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.526842 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.531832 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.584968 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0505 09:38:16.585846 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.586293 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.618795 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.632925 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.699328 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:16.891016 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:17.090380 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:17.295938 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:17.493824 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:17.692321 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:17.892974 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:18.090206 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:18.291514 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:18.494460 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:18.691325 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:18.891041 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:19.092343 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:19.294843 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:19.492671 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:19.694187 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:19.892281 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:20.093314 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:20.293225 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:20.491358 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:20.692106 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle W0505 09:38:20.894677 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0505 09:38:20.894789 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:21.092806 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:21.291645 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:21.490529 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0505 09:38:21.692114 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:21.892262 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:22.090924 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:22.291923 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:22.492563 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:22.690078 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:22.893567 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:23.091455 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:23.293055 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0505 09:38:23.490723 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:23.692131 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:23.893963 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:24.091454 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:24.290977 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0505 09:38:24.491432 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:24.690311 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0505 09:38:24.891074 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:25.091416 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:25.290844 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:25.492663 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:25.693381 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:25.893871 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:26.092413 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:26.292908 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:26.490741 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:26.694337 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:26.891878 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:27.091962 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:27.292506 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:27.493610 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:27.690620 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:27.891816 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:28.090493 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:28.290705 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:28.492895 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:28.691342 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:28.890439 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:29.090732 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:29.291803 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:29.490985 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:29.691521 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:29.891914 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:30.090153 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:30.289431 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:30.490177 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:30.690953 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0505 09:38:39.879511 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0505 09:38:44.396016 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0505 09:38:44.414511 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0505 09:38:48.608906 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0505 09:38:48.608946 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0505 09:39:18.665053 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0505 09:40:37.739363 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0505 09:46:09.752899 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.532614 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.535237 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.546889 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.561957 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.572861 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.585151 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.597302 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:13.612154 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:39.669084 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0505 09:46:55.552762 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0505 09:47:14.605714 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0505 09:47:18.290247 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0505 09:47:18.393927 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0505 09:47:18.492587 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0505 09:47:18.593055 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0505 09:47:18.690086 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0505 09:47:18.788336 1 configmap.go:109] updating configmap open-cluster-management-2q3meumag9q14n7fvhs60ip3ci7t39g4/config-service-cabundle with the service signing CA bundle I0505 09:47:18.887601 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0505 09:47:18.987893 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0505 09:47:19.087641 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0505 09:47:19.187926 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0505 09:47:19.294679 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0505 09:47:19.386950 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0505 09:47:19.487567 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0505 09:47:19.589296 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0505 09:47:19.725082 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0505 09:50:54.346895 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:54.364259 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:54.386034 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:54.396088 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:54.882323 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:55.345657 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:55.662657 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:55.848319 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:56.400593 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:56.500860 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0505 09:50:57.068754 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0505 09:50:57.252286 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0505 09:50:57.457517 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0505 09:50:57.661747 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0505 09:50:57.846360 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0505 09:51:00.102386 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0505 09:51:00.154776 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0505 09:51:00.230266 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0505 09:51:00.330199 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0505 09:51:00.433021 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0505 09:52:55.576617 1 configmap.go:109] updating configmap managed-tenant-nd3gv/openshift-service-ca.crt with the service signing CA bundle I0505 09:52:56.828999 1 configmap.go:109] updating configmap managed-tenant-nd3gv/config-service-cabundle with the service signing CA bundle W0505 09:58:16.445537 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"