W0423 19:56:15.225786 1 cmd.go:257] Using insecure, self-signed certificates I0423 19:56:15.226028 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776974175 cert, and key in /tmp/serving-cert-4074792788/serving-signer.crt, /tmp/serving-cert-4074792788/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1776974175" is unset, resetting to 157680000000000000 years! I0423 19:56:15.560316 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0423 19:56:15.560638 1 observer_polling.go:159] Starting file observer I0423 19:56:15.560691 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0423 19:56:15.560708 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0423 19:56:15.560713 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0423 19:56:15.560717 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0423 19:56:15.586582 1 builder.go:304] service-ca-controller version - I0423 19:56:15.587187 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4074792788/tls.crt::/tmp/serving-cert-4074792788/tls.key" I0423 19:56:16.034467 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0423 19:56:16.039413 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0423 19:56:16.039428 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0423 19:56:16.039447 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0423 19:56:16.039452 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0423 19:56:16.042797 1 secure_serving.go:57] Forcing use of http/1.1 only I0423 19:56:16.042805 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0423 19:56:16.042820 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0423 19:56:16.042827 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0423 19:56:16.042833 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0423 19:56:16.042836 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0423 19:56:16.042840 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0423 19:56:16.042843 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0423 19:56:16.046844 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0423 19:56:16.046877 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0423 19:56:16.046912 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0423 19:56:16.046921 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0423 19:56:16.046937 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0423 19:56:16.046940 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0423 19:56:16.047230 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4074792788/tls.crt::/tmp/serving-cert-4074792788/tls.key" I0423 19:56:16.047812 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4074792788/tls.crt::/tmp/serving-cert-4074792788/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776974175\" (2026-04-23 19:56:14 +0000 UTC to 2026-04-23 19:56:15 +0000 UTC (now=2026-04-23 19:56:16.047766883 +0000 UTC))" I0423 19:56:16.048150 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776974176\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776974175\" (2026-04-23 18:56:15 +0000 UTC to 2027-04-23 18:56:15 +0000 UTC (now=2026-04-23 19:56:16.048121309 +0000 UTC))" I0423 19:56:16.048179 1 secure_serving.go:213] Serving securely on [::]:8443 I0423 19:56:16.048213 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0423 19:56:16.048153 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0423 19:56:16.048782 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0423 19:56:16.050480 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.051157 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.051478 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.059669 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0423 19:56:16.059720 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"a68000b6-09ab-4acd-bd7c-84ab7ac392ef", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10771", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-gz4pr_f4e838ec-24f6-4810-9c0b-180800936a08 became leader I0423 19:56:16.060725 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0423 19:56:16.060726 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0423 19:56:16.060746 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0423 19:56:16.060762 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0423 19:56:16.060789 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0423 19:56:16.060849 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0423 19:56:16.061269 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0423 19:56:16.061547 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0423 19:56:16.061572 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0423 19:56:16.063511 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.065190 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.067615 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.069359 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.105489 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.147013 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0423 19:56:16.147089 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0423 19:56:16.147109 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0423 19:56:16.147261 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-23 19:39:57 +0000 UTC to 2036-04-20 19:39:57 +0000 UTC (now=2026-04-23 19:56:16.147227141 +0000 UTC))" I0423 19:56:16.147610 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4074792788/tls.crt::/tmp/serving-cert-4074792788/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776974175\" (2026-04-23 19:56:14 +0000 UTC to 2026-04-23 19:56:15 +0000 UTC (now=2026-04-23 19:56:16.147586001 +0000 UTC))" I0423 19:56:16.147827 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776974176\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776974175\" (2026-04-23 18:56:15 +0000 UTC to 2027-04-23 18:56:15 +0000 UTC (now=2026-04-23 19:56:16.147810209 +0000 UTC))" I0423 19:56:16.147993 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-23 19:39:59 +0000 UTC to 2036-04-20 19:39:59 +0000 UTC (now=2026-04-23 19:56:16.147973082 +0000 UTC))" I0423 19:56:16.148038 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-23 19:40:01 +0000 UTC to 2036-04-20 19:40:01 +0000 UTC (now=2026-04-23 19:56:16.148009922 +0000 UTC))" I0423 19:56:16.148070 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-23 19:40:04 +0000 UTC to 2036-04-20 19:40:04 +0000 UTC (now=2026-04-23 19:56:16.148052146 +0000 UTC))" I0423 19:56:16.148096 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-23 19:40:05 +0000 UTC to 2036-04-20 19:40:05 +0000 UTC (now=2026-04-23 19:56:16.148083911 +0000 UTC))" I0423 19:56:16.148124 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-23 19:40:06 +0000 UTC to 2036-04-20 19:40:06 +0000 UTC (now=2026-04-23 19:56:16.14811076 +0000 UTC))" I0423 19:56:16.148154 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ps2c525gle0drfkvt0gk7h7eo836dmv-kx-497c05fce7_customer-system-admin-signer@1776973319\" [] issuer=\"\" (2026-04-23 19:41:59 +0000 UTC to 2026-04-30 19:42:00 +0000 UTC (now=2026-04-23 19:56:16.148137711 +0000 UTC))" I0423 19:56:16.148208 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ps2c525gle0drfkvt0gk7h7eo836dmv-kx-497c05fce7_sre-system-admin-signer@1776973319\" [] issuer=\"\" (2026-04-23 19:41:59 +0000 UTC to 2026-04-30 19:42:00 +0000 UTC (now=2026-04-23 19:56:16.148168698 +0000 UTC))" I0423 19:56:16.148235 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-23 19:39:57 +0000 UTC to 2036-04-20 19:39:57 +0000 UTC (now=2026-04-23 19:56:16.148222333 +0000 UTC))" I0423 19:56:16.148408 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4074792788/tls.crt::/tmp/serving-cert-4074792788/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776974175\" (2026-04-23 19:56:14 +0000 UTC to 2026-04-23 19:56:15 +0000 UTC (now=2026-04-23 19:56:16.14839872 +0000 UTC))" I0423 19:56:16.148590 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776974176\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776974175\" (2026-04-23 18:56:15 +0000 UTC to 2027-04-23 18:56:15 +0000 UTC (now=2026-04-23 19:56:16.148573861 +0000 UTC))" I0423 19:56:16.156397 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.160762 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0423 19:56:16.160775 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0423 19:56:16.160781 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0423 19:56:16.160784 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0423 19:56:16.160787 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0423 19:56:16.160789 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0423 19:56:16.160797 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0423 19:56:16.160800 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0423 19:56:16.160803 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0423 19:56:16.160807 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0423 19:56:16.160810 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0423 19:56:16.160813 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0423 19:56:16.160839 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0423 19:56:16.160848 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0423 19:56:16.160863 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0423 19:56:16.160873 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0423 19:56:16.160879 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0423 19:56:16.160884 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0423 19:56:16.160888 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0423 19:56:16.160892 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0423 19:56:16.160910 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0423 19:56:16.160913 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0423 19:56:16.160922 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0423 19:56:16.160930 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0423 19:56:16.160923 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0423 19:56:16.160943 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0423 19:56:16.160950 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0423 19:56:16.160953 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0423 19:56:16.160935 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0423 19:56:16.160957 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0423 19:56:16.160963 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0423 19:56:16.160972 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.160982 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.160981 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.160987 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.160995 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.161612 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0423 19:56:16.161624 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0423 19:56:16.161633 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0423 19:56:16.161639 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0423 19:56:16.161625 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0423 19:56:16.161644 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0423 19:56:16.161663 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0423 19:56:16.161668 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0423 19:56:16.161656 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0423 19:56:16.161680 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0423 19:56:16.161683 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0423 19:56:16.161688 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0423 19:56:16.172687 1 configmap.go:109] updating configmap open-cluster-management-2ps2c525gle0drfkvt0gk7h7eo836dmv/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.175144 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.175339 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.176968 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.177215 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.188752 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0423 19:56:16.191367 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.191489 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.191697 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.227672 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0423 19:56:16.261309 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0423 19:56:16.261323 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0423 19:56:16.261328 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0423 19:56:16.261332 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0423 19:56:16.261338 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0423 19:56:16.261343 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0423 19:56:16.261365 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0423 19:56:16.261401 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0423 19:56:16.268592 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.477037 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.678983 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:16.871771 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:17.072992 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:17.276179 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:17.473209 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:17.673177 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:17.871029 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:18.074137 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:18.272713 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:18.481997 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:18.670888 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:18.875338 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:19.072914 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:19.272961 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:19.471129 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:19.677414 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:19.873597 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:20.072550 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:20.270715 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:20.472443 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:20.673363 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:20.873826 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:21.073272 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:21.273202 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0423 19:56:21.471435 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:21.673014 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:21.872002 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:22.072277 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:22.274863 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:22.476139 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:22.673222 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:22.871093 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:23.072639 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0423 19:56:23.273323 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:23.475163 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:23.671847 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:23.871634 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:24.071296 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0423 19:56:24.270062 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:24.474221 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0423 19:56:24.673831 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:24.872306 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:25.073552 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:25.273826 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:25.473386 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:25.672349 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:25.872099 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:26.074017 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:26.272032 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:26.473157 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:26.672720 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:26.872838 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:27.073474 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:27.275067 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:27.475610 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:27.672183 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:27.871041 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:28.072878 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:28.281019 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:28.470327 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:28.670503 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:28.870981 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:29.071358 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:29.270018 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:29.470505 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:29.670925 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:29.869923 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:30.071125 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:30.271915 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:30.471507 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0423 19:56:40.404573 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0423 19:59:47.006246 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0423 19:59:47.020589 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0423 19:59:54.208081 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0423 19:59:54.208123 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0423 20:00:25.387651 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0423 20:01:41.238579 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0423 20:05:46.491660 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.239278 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.253940 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.272269 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.290997 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.315157 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.327746 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.341959 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0423 20:05:50.367955 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0423 20:06:14.805168 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0423 20:06:31.018242 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0423 20:06:50.075859 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0423 20:06:53.765239 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0423 20:06:53.871958 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0423 20:06:53.967046 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0423 20:06:54.067717 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0423 20:06:54.164986 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0423 20:06:54.260131 1 configmap.go:109] updating configmap open-cluster-management-2ps2c525gle0drfkvt0gk7h7eo836dmv/config-service-cabundle with the service signing CA bundle I0423 20:06:54.359327 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0423 20:06:54.459922 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0423 20:06:54.559848 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0423 20:06:54.658574 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0423 20:06:54.758268 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0423 20:06:54.860083 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0423 20:06:54.958999 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0423 20:06:55.061938 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0423 20:06:55.174328 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0423 20:10:06.161419 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.173908 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.184793 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.200308 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.524611 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.656344 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.724247 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:06.738805 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:07.857995 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:07.983785 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0423 20:10:08.753912 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0423 20:10:08.894032 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0423 20:10:09.059275 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0423 20:10:09.302482 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0423 20:10:09.572271 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0423 20:10:12.046425 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0423 20:10:12.114287 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0423 20:10:12.180048 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0423 20:10:12.272985 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0423 20:10:12.372211 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0423 20:12:06.744339 1 configmap.go:109] updating configmap default-managed-tenant-z5tjz/openshift-service-ca.crt with the service signing CA bundle I0423 20:12:07.984445 1 configmap.go:109] updating configmap default-managed-tenant-z5tjz/config-service-cabundle with the service signing CA bundle