W0506 03:04:09.910164 1 cmd.go:257] Using insecure, self-signed certificates I0506 03:04:09.910411 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778036649 cert, and key in /tmp/serving-cert-1873481528/serving-signer.crt, /tmp/serving-cert-1873481528/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1778036649" is unset, resetting to 157680000000000000 years! I0506 03:04:10.204228 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0506 03:04:10.204544 1 observer_polling.go:159] Starting file observer I0506 03:04:10.204590 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0506 03:04:10.204603 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0506 03:04:10.204610 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0506 03:04:10.204614 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0506 03:04:10.230064 1 builder.go:304] service-ca-controller version - I0506 03:04:10.230699 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1873481528/tls.crt::/tmp/serving-cert-1873481528/tls.key" I0506 03:04:10.706369 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0506 03:04:10.711656 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0506 03:04:10.711671 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0506 03:04:10.711691 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0506 03:04:10.711696 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0506 03:04:10.714788 1 secure_serving.go:57] Forcing use of http/1.1 only I0506 03:04:10.714801 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0506 03:04:10.714805 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0506 03:04:10.714815 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0506 03:04:10.714820 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0506 03:04:10.714823 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0506 03:04:10.714827 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0506 03:04:10.714829 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0506 03:04:10.719078 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0506 03:04:10.719105 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0506 03:04:10.719104 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0506 03:04:10.719121 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0506 03:04:10.719136 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0506 03:04:10.719126 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0506 03:04:10.719290 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1873481528/tls.crt::/tmp/serving-cert-1873481528/tls.key" I0506 03:04:10.719449 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1873481528/tls.crt::/tmp/serving-cert-1873481528/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778036649\" (2026-05-06 03:04:09 +0000 UTC to 2026-05-06 03:04:10 +0000 UTC (now=2026-05-06 03:04:10.719396359 +0000 UTC))" I0506 03:04:10.719643 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778036650\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778036650\" (2026-05-06 02:04:10 +0000 UTC to 2027-05-06 02:04:10 +0000 UTC (now=2026-05-06 03:04:10.71962883 +0000 UTC))" I0506 03:04:10.719663 1 secure_serving.go:213] Serving securely on [::]:8443 I0506 03:04:10.719692 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0506 03:04:10.719706 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0506 03:04:10.720152 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0506 03:04:10.722147 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.722147 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.722183 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.729961 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0506 03:04:10.730017 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"1fb14ef1-07a9-4568-9a33-6b409206813a", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10828", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-4b4gq_2d4b9b48-5a92-4edc-a7cc-d6043ecae396 became leader I0506 03:04:10.731966 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0506 03:04:10.731970 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0506 03:04:10.732108 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0506 03:04:10.732148 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0506 03:04:10.732371 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0506 03:04:10.732289 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0506 03:04:10.733292 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0506 03:04:10.733525 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0506 03:04:10.733605 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0506 03:04:10.734343 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.736074 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.738640 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.739449 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.816678 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.819744 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0506 03:04:10.819756 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0506 03:04:10.819765 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0506 03:04:10.819926 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-06 02:47:55 +0000 UTC to 2036-05-03 02:47:55 +0000 UTC (now=2026-05-06 03:04:10.819901765 +0000 UTC))" I0506 03:04:10.820124 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1873481528/tls.crt::/tmp/serving-cert-1873481528/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778036649\" (2026-05-06 03:04:09 +0000 UTC to 2026-05-06 03:04:10 +0000 UTC (now=2026-05-06 03:04:10.820111599 +0000 UTC))" I0506 03:04:10.820338 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778036650\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778036650\" (2026-05-06 02:04:10 +0000 UTC to 2027-05-06 02:04:10 +0000 UTC (now=2026-05-06 03:04:10.820324663 +0000 UTC))" I0506 03:04:10.820451 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-06 02:47:56 +0000 UTC to 2036-05-03 02:47:56 +0000 UTC (now=2026-05-06 03:04:10.820440812 +0000 UTC))" I0506 03:04:10.820471 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-06 02:47:59 +0000 UTC to 2036-05-03 02:47:59 +0000 UTC (now=2026-05-06 03:04:10.82046248 +0000 UTC))" I0506 03:04:10.820504 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-06 02:48:01 +0000 UTC to 2036-05-03 02:48:01 +0000 UTC (now=2026-05-06 03:04:10.820479498 +0000 UTC))" I0506 03:04:10.820522 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-06 02:48:04 +0000 UTC to 2036-05-03 02:48:04 +0000 UTC (now=2026-05-06 03:04:10.82051352 +0000 UTC))" I0506 03:04:10.820538 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-06 02:48:05 +0000 UTC to 2036-05-03 02:48:05 +0000 UTC (now=2026-05-06 03:04:10.820528499 +0000 UTC))" I0506 03:04:10.820562 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q45oqblirj1dttrkl2v26ci3lb7781m-kx-e4314b0d57_customer-system-admin-signer@1778035793\" [] issuer=\"\" (2026-05-06 02:49:55 +0000 UTC to 2026-05-13 02:49:56 +0000 UTC (now=2026-05-06 03:04:10.820546303 +0000 UTC))" I0506 03:04:10.820581 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q45oqblirj1dttrkl2v26ci3lb7781m-kx-e4314b0d57_sre-system-admin-signer@1778035793\" [] issuer=\"\" (2026-05-06 02:49:53 +0000 UTC to 2026-05-13 02:49:54 +0000 UTC (now=2026-05-06 03:04:10.820571419 +0000 UTC))" I0506 03:04:10.820595 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-06 02:47:55 +0000 UTC to 2036-05-03 02:47:55 +0000 UTC (now=2026-05-06 03:04:10.820588207 +0000 UTC))" I0506 03:04:10.820757 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1873481528/tls.crt::/tmp/serving-cert-1873481528/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778036649\" (2026-05-06 03:04:09 +0000 UTC to 2026-05-06 03:04:10 +0000 UTC (now=2026-05-06 03:04:10.820746275 +0000 UTC))" I0506 03:04:10.820905 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778036650\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778036650\" (2026-05-06 02:04:10 +0000 UTC to 2027-05-06 02:04:10 +0000 UTC (now=2026-05-06 03:04:10.820895985 +0000 UTC))" I0506 03:04:10.832907 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0506 03:04:10.832917 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0506 03:04:10.832927 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0506 03:04:10.832931 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0506 03:04:10.832933 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0506 03:04:10.832938 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0506 03:04:10.832954 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0506 03:04:10.832942 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0506 03:04:10.832961 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0506 03:04:10.832961 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0506 03:04:10.832968 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0506 03:04:10.832970 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0506 03:04:10.832977 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0506 03:04:10.832982 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0506 03:04:10.832954 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0506 03:04:10.832973 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0506 03:04:10.832996 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0506 03:04:10.833001 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0506 03:04:10.833007 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0506 03:04:10.834090 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0506 03:04:10.834101 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0506 03:04:10.834105 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0506 03:04:10.834113 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0506 03:04:10.834118 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0506 03:04:10.834107 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0506 03:04:10.834121 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0506 03:04:10.834129 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0506 03:04:10.834134 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0506 03:04:10.834152 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0506 03:04:10.834139 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0506 03:04:10.834166 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0506 03:04:10.915837 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:10.932345 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0506 03:04:10.932360 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0506 03:04:10.932366 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0506 03:04:10.932370 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0506 03:04:10.932373 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0506 03:04:10.932375 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0506 03:04:10.932378 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0506 03:04:10.932401 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.932404 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 03:04:10.932414 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 03:04:10.932419 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 03:04:10.932424 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 03:04:10.932428 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0506 03:04:10.932444 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.932483 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.932488 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.932483 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.947957 1 configmap.go:109] updating configmap open-cluster-management-2q45oqblirj1dttrkl2v26ci3lb7781m/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.954167 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.954446 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.954779 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.965539 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.971937 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0506 03:04:10.971995 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.973057 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.975357 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:10.983080 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:11.073465 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0506 03:04:11.132873 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0506 03:04:11.132895 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0506 03:04:11.132905 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0506 03:04:11.132908 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0506 03:04:11.132911 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0506 03:04:11.132915 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0506 03:04:11.132952 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0506 03:04:11.132970 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0506 03:04:11.144188 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:11.343028 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:11.546635 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:11.746702 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:11.945652 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:12.145756 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:12.345365 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:12.544188 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:12.744898 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:12.945221 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:13.143754 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:13.344662 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:13.545128 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:13.742540 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:13.943981 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:14.143992 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:14.342585 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:14.545203 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:14.744715 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:14.943096 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:15.143654 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:15.344571 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:15.545298 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:15.744938 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:15.943726 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0506 03:04:16.145233 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:16.343449 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:16.546134 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:16.745161 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:16.943030 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:17.148997 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:17.342090 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:17.543149 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:17.742930 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0506 03:04:17.943803 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:18.143579 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:18.343384 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:18.542931 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:18.743677 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0506 03:04:18.941036 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:19.143635 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0506 03:04:19.344206 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:19.543941 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:19.743734 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:19.944307 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:20.146401 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:20.345312 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:20.545944 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:20.743721 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:20.945953 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:21.144516 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:21.345518 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:21.545732 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:21.743686 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:21.943955 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:22.142809 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:22.343974 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:22.541792 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:22.743178 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:22.941815 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:23.142472 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:23.343447 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:23.543037 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:23.742884 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:23.946583 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:24.143224 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:24.342415 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:24.540657 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:24.744236 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:24.941948 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0506 03:04:25.143289 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0506 03:05:06.814355 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0506 03:05:57.588034 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0506 03:05:57.602515 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0506 03:06:04.767184 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0506 03:06:04.781533 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0506 03:06:35.669898 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0506 03:09:51.869307 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0506 03:16:23.204982 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:26.999034 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.014909 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.048245 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.081808 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.139852 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.163835 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.192591 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0506 03:16:27.218740 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0506 03:17:00.977870 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0506 03:17:22.152061 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0506 03:17:23.029740 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0506 03:17:27.053592 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0506 03:17:27.149580 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0506 03:17:27.248404 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0506 03:17:27.346486 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0506 03:17:27.458854 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0506 03:17:27.568495 1 configmap.go:109] updating configmap open-cluster-management-2q45oqblirj1dttrkl2v26ci3lb7781m/config-service-cabundle with the service signing CA bundle I0506 03:17:27.660115 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0506 03:17:27.757731 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0506 03:17:27.846528 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0506 03:17:27.948434 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0506 03:17:28.047542 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0506 03:17:28.150574 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0506 03:17:28.246233 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0506 03:17:28.347983 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0506 03:17:28.764040 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0506 03:21:17.606732 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:17.629782 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:17.646053 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:17.654351 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:17.957860 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:18.178803 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:18.356521 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:18.498783 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:18.991913 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:19.200379 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0506 03:21:22.405771 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0506 03:21:22.470214 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0506 03:21:22.577682 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0506 03:21:22.651706 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0506 03:21:22.720765 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0506 03:21:22.864145 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0506 03:21:25.178713 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0506 03:21:25.225899 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0506 03:21:25.269817 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0506 03:21:25.370271 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0506 03:23:17.691733 1 configmap.go:109] updating configmap managed-tenant-ew1a0/openshift-service-ca.crt with the service signing CA bundle I0506 03:23:18.936070 1 configmap.go:109] updating configmap managed-tenant-ew1a0/config-service-cabundle with the service signing CA bundle W0506 03:24:11.074684 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0506 03:44:11.075927 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"