W0512 11:37:05.310370 1 cmd.go:257] Using insecure, self-signed certificates I0512 11:37:05.316968 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778585825 cert, and key in /tmp/serving-cert-2582076343/serving-signer.crt, /tmp/serving-cert-2582076343/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1778585825" is unset, resetting to 157680000000000000 years! I0512 11:37:05.981180 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0512 11:37:05.981490 1 observer_polling.go:159] Starting file observer I0512 11:37:05.982916 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0512 11:37:05.982932 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0512 11:37:05.982944 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0512 11:37:05.982948 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0512 11:37:06.008622 1 builder.go:304] service-ca-controller version - I0512 11:37:06.009251 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2582076343/tls.crt::/tmp/serving-cert-2582076343/tls.key" I0512 11:37:06.904741 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0512 11:37:06.911091 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0512 11:37:06.911107 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0512 11:37:06.911127 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0512 11:37:06.911131 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0512 11:37:06.914250 1 secure_serving.go:57] Forcing use of http/1.1 only I0512 11:37:06.914261 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0512 11:37:06.914267 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0512 11:37:06.914272 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0512 11:37:06.914276 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0512 11:37:06.914279 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0512 11:37:06.914282 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0512 11:37:06.914284 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0512 11:37:06.919046 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0512 11:37:06.919060 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0512 11:37:06.919072 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0512 11:37:06.919078 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0512 11:37:06.919080 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0512 11:37:06.919095 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0512 11:37:06.919296 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2582076343/tls.crt::/tmp/serving-cert-2582076343/tls.key" I0512 11:37:06.919368 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2582076343/tls.crt::/tmp/serving-cert-2582076343/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778585825\" (2026-05-12 11:37:04 +0000 UTC to 2026-05-12 11:37:05 +0000 UTC (now=2026-05-12 11:37:06.919329365 +0000 UTC))" I0512 11:37:06.919542 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778585826\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778585826\" (2026-05-12 10:37:06 +0000 UTC to 2027-05-12 10:37:06 +0000 UTC (now=2026-05-12 11:37:06.919527634 +0000 UTC))" I0512 11:37:06.919560 1 secure_serving.go:213] Serving securely on [::]:8443 I0512 11:37:06.919576 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0512 11:37:06.919578 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0512 11:37:06.920028 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0512 11:37:06.922479 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.922762 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.922879 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.931341 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0512 11:37:06.931380 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"38949e56-30a9-441d-8941-0c74fcf0e642", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10333", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-j28g5_468a85dc-e6c4-494e-af3e-98547f0c079f became leader I0512 11:37:06.932253 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0512 11:37:06.932262 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0512 11:37:06.932440 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0512 11:37:06.932251 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0512 11:37:06.932503 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0512 11:37:06.933091 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0512 11:37:06.933439 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0512 11:37:06.934030 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0512 11:37:06.934049 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0512 11:37:06.937034 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.939729 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.940016 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.945932 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:06.982452 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:07.019385 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0512 11:37:07.019390 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0512 11:37:07.019404 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0512 11:37:07.019615 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-12 11:25:17 +0000 UTC to 2036-05-09 11:25:17 +0000 UTC (now=2026-05-12 11:37:07.019589589 +0000 UTC))" I0512 11:37:07.019805 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2582076343/tls.crt::/tmp/serving-cert-2582076343/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778585825\" (2026-05-12 11:37:04 +0000 UTC to 2026-05-12 11:37:05 +0000 UTC (now=2026-05-12 11:37:07.019788943 +0000 UTC))" I0512 11:37:07.019968 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778585826\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778585826\" (2026-05-12 10:37:06 +0000 UTC to 2027-05-12 10:37:06 +0000 UTC (now=2026-05-12 11:37:07.01995547 +0000 UTC))" I0512 11:37:07.020072 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-12 11:25:24 +0000 UTC to 2036-05-09 11:25:24 +0000 UTC (now=2026-05-12 11:37:07.020061841 +0000 UTC))" I0512 11:37:07.020113 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-12 11:25:27 +0000 UTC to 2036-05-09 11:25:27 +0000 UTC (now=2026-05-12 11:37:07.020083019 +0000 UTC))" I0512 11:37:07.020133 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-12 11:25:29 +0000 UTC to 2036-05-09 11:25:29 +0000 UTC (now=2026-05-12 11:37:07.020123671 +0000 UTC))" I0512 11:37:07.020148 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-12 11:25:31 +0000 UTC to 2036-05-09 11:25:31 +0000 UTC (now=2026-05-12 11:37:07.020140006 +0000 UTC))" I0512 11:37:07.020162 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-12 11:25:33 +0000 UTC to 2036-05-09 11:25:33 +0000 UTC (now=2026-05-12 11:37:07.020154857 +0000 UTC))" I0512 11:37:07.020179 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q8btjun6td6kc8ulg3ih7ojvp65gmqk-kx-8a4f94b6d2_customer-system-admin-signer@1778585279\" [] issuer=\"\" (2026-05-12 11:27:59 +0000 UTC to 2026-05-19 11:28:00 +0000 UTC (now=2026-05-12 11:37:07.02016918 +0000 UTC))" I0512 11:37:07.020208 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q8btjun6td6kc8ulg3ih7ojvp65gmqk-kx-8a4f94b6d2_sre-system-admin-signer@1778585279\" [] issuer=\"\" (2026-05-12 11:27:59 +0000 UTC to 2026-05-19 11:28:00 +0000 UTC (now=2026-05-12 11:37:07.020188682 +0000 UTC))" I0512 11:37:07.020225 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-12 11:25:17 +0000 UTC to 2036-05-09 11:25:17 +0000 UTC (now=2026-05-12 11:37:07.020217538 +0000 UTC))" I0512 11:37:07.020377 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2582076343/tls.crt::/tmp/serving-cert-2582076343/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778585825\" (2026-05-12 11:37:04 +0000 UTC to 2026-05-12 11:37:05 +0000 UTC (now=2026-05-12 11:37:07.020366909 +0000 UTC))" I0512 11:37:07.020534 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778585826\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778585826\" (2026-05-12 10:37:06 +0000 UTC to 2027-05-12 10:37:06 +0000 UTC (now=2026-05-12 11:37:07.020525028 +0000 UTC))" I0512 11:37:07.025876 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:07.032877 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0512 11:37:07.032885 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0512 11:37:07.032891 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0512 11:37:07.032895 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0512 11:37:07.032901 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0512 11:37:07.032901 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0512 11:37:07.032907 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0512 11:37:07.032897 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0512 11:37:07.032910 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0512 11:37:07.032921 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0512 11:37:07.032924 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.032929 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0512 11:37:07.032933 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0512 11:37:07.032933 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.032935 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0512 11:37:07.032910 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:37:07.032955 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:37:07.032960 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.032966 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.032967 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:37:07.033053 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:37:07.033058 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:37:07.033060 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.033178 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0512 11:37:07.033193 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:37:07.033199 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:37:07.033204 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:37:07.033209 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:37:07.033213 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:37:07.033231 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0512 11:37:07.033275 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0512 11:37:07.033285 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0512 11:37:07.033291 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0512 11:37:07.033296 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0512 11:37:07.033299 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0512 11:37:07.033301 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0512 11:37:07.034113 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0512 11:37:07.034123 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0512 11:37:07.034123 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0512 11:37:07.034128 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0512 11:37:07.034131 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0512 11:37:07.034136 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0512 11:37:07.034140 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0512 11:37:07.034143 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0512 11:37:07.034145 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0512 11:37:07.034132 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0512 11:37:07.034160 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0512 11:37:07.034163 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0512 11:37:07.043961 1 configmap.go:109] updating configmap open-cluster-management-2q8btjun6td6kc8ulg3ih7ojvp65gmqk/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.050658 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.054485 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.054560 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.056466 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.056579 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0512 11:37:07.064026 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.068976 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.069444 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.090478 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:37:07.133067 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0512 11:37:07.133096 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0512 11:37:07.133110 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0512 11:37:07.133116 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0512 11:37:07.133120 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0512 11:37:07.133125 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... W0512 11:37:07.133165 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0512 11:37:07.133166 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0512 11:37:07.142735 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.348996 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.551804 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.743951 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:07.947289 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:08.146432 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:08.346141 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:08.546402 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:08.745252 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:08.944755 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:09.144722 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:09.346566 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:09.543701 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:09.746857 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:09.946050 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:10.146359 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:10.346367 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:10.543460 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:10.744612 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:10.944229 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:11.145006 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0512 11:37:11.145123 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0512 11:37:11.343636 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:11.546754 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:11.746994 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:11.945894 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:12.146824 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:12.343362 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0512 11:37:12.547314 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:12.744596 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:12.969115 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:13.150111 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:13.345268 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:13.546025 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:13.746088 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:13.946622 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:14.145591 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0512 11:37:14.343540 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:14.547008 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:14.744632 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:14.942930 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:15.141665 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0512 11:37:15.349402 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:15.546182 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0512 11:37:15.746532 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:15.945421 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:16.148998 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:16.345880 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:16.544308 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:16.743232 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:16.943637 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:17.145680 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:17.346316 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:17.545810 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:17.746668 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:17.943247 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:18.146026 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:18.345053 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:18.543419 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:18.742558 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:18.942270 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:19.142487 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:19.341995 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:19.541369 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:19.743783 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:19.942599 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:20.143691 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:20.342906 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:20.543477 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:20.743781 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:20.944439 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:21.143362 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:21.341933 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:21.543396 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0512 11:37:31.106658 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0512 11:37:34.960532 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0512 11:37:34.973415 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0512 11:37:39.200481 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0512 11:37:39.213780 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0512 11:38:09.241577 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0512 11:39:26.584195 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0512 11:46:15.267324 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.282265 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.294331 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.311026 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.325701 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.339918 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.358986 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.370857 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:19.382831 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:56.616534 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:58.466721 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0512 11:47:18.040013 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0512 11:47:21.723862 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0512 11:47:21.822240 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0512 11:47:21.919715 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0512 11:47:22.021551 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0512 11:47:22.120286 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0512 11:47:22.220396 1 configmap.go:109] updating configmap open-cluster-management-2q8btjun6td6kc8ulg3ih7ojvp65gmqk/config-service-cabundle with the service signing CA bundle I0512 11:47:22.322876 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0512 11:47:22.421941 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0512 11:47:22.521286 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0512 11:47:22.620241 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0512 11:47:22.721249 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0512 11:47:22.827500 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0512 11:47:22.922905 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0512 11:47:23.019898 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0512 11:47:23.146272 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0512 11:50:25.256273 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.274170 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.285033 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.298867 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.593127 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.762989 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.895583 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:25.908210 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:26.565079 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:26.841159 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0512 11:50:27.087331 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0512 11:50:27.201551 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0512 11:50:27.300975 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0512 11:50:27.536254 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0512 11:50:28.324558 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0512 11:50:31.201385 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0512 11:50:31.288189 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0512 11:50:31.388363 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0512 11:50:31.485046 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0512 11:50:31.588012 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0512 11:52:51.750207 1 configmap.go:109] updating configmap managed-tenant-leyxz/openshift-service-ca.crt with the service signing CA bundle I0512 11:52:52.992765 1 configmap.go:109] updating configmap managed-tenant-leyxz/config-service-cabundle with the service signing CA bundle W0512 11:57:07.091782 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"