W0424 07:14:50.103684 1 cmd.go:257] Using insecure, self-signed certificates I0424 07:14:50.103927 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777014890 cert, and key in /tmp/serving-cert-2319175507/serving-signer.crt, /tmp/serving-cert-2319175507/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777014890" is unset, resetting to 157680000000000000 years! I0424 07:14:50.321195 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0424 07:14:50.321493 1 observer_polling.go:159] Starting file observer I0424 07:14:50.321565 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0424 07:14:50.321577 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0424 07:14:50.321582 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0424 07:14:50.321586 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0424 07:14:50.346626 1 builder.go:304] service-ca-controller version - I0424 07:14:50.347203 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2319175507/tls.crt::/tmp/serving-cert-2319175507/tls.key" I0424 07:14:50.706066 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0424 07:14:50.711823 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0424 07:14:50.711837 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0424 07:14:50.711854 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0424 07:14:50.711859 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0424 07:14:50.714825 1 secure_serving.go:57] Forcing use of http/1.1 only I0424 07:14:50.714837 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0424 07:14:50.714842 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0424 07:14:50.714846 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0424 07:14:50.714850 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0424 07:14:50.714853 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0424 07:14:50.714857 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0424 07:14:50.714860 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0424 07:14:50.719882 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0424 07:14:50.719907 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0424 07:14:50.719947 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0424 07:14:50.719960 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 07:14:50.719965 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0424 07:14:50.719984 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 07:14:50.720126 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2319175507/tls.crt::/tmp/serving-cert-2319175507/tls.key" I0424 07:14:50.720171 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2319175507/tls.crt::/tmp/serving-cert-2319175507/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777014890\" (2026-04-24 07:14:49 +0000 UTC to 2026-04-24 07:14:50 +0000 UTC (now=2026-04-24 07:14:50.720149336 +0000 UTC))" I0424 07:14:50.720319 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0424 07:14:50.720362 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777014890\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777014890\" (2026-04-24 06:14:50 +0000 UTC to 2027-04-24 06:14:50 +0000 UTC (now=2026-04-24 07:14:50.720328451 +0000 UTC))" I0424 07:14:50.720376 1 secure_serving.go:213] Serving securely on [::]:8443 I0424 07:14:50.720394 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0424 07:14:50.720408 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0424 07:14:50.722628 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.722684 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.722629 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.733012 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0424 07:14:50.733064 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"2d232c06-25ff-41ee-b61b-8a69f57cc285", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11853", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-hdjh5_1c76c002-ca28-4b52-a29a-cd81b0b7e7ab became leader I0424 07:14:50.735620 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0424 07:14:50.735647 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0424 07:14:50.735627 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0424 07:14:50.735660 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0424 07:14:50.735690 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0424 07:14:50.735703 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0424 07:14:50.736050 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0424 07:14:50.736273 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0424 07:14:50.736291 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0424 07:14:50.737317 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.745391 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.750435 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.751436 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.787288 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.820461 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 07:14:50.820470 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 07:14:50.820459 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0424 07:14:50.820758 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 06:58:20 +0000 UTC to 2036-04-21 06:58:20 +0000 UTC (now=2026-04-24 07:14:50.820729396 +0000 UTC))" I0424 07:14:50.820975 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2319175507/tls.crt::/tmp/serving-cert-2319175507/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777014890\" (2026-04-24 07:14:49 +0000 UTC to 2026-04-24 07:14:50 +0000 UTC (now=2026-04-24 07:14:50.820957473 +0000 UTC))" I0424 07:14:50.821148 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777014890\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777014890\" (2026-04-24 06:14:50 +0000 UTC to 2027-04-24 06:14:50 +0000 UTC (now=2026-04-24 07:14:50.821131688 +0000 UTC))" I0424 07:14:50.821331 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-24 06:58:22 +0000 UTC to 2036-04-21 06:58:22 +0000 UTC (now=2026-04-24 07:14:50.821316108 +0000 UTC))" I0424 07:14:50.821351 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-24 06:58:24 +0000 UTC to 2036-04-21 06:58:24 +0000 UTC (now=2026-04-24 07:14:50.821342129 +0000 UTC))" I0424 07:14:50.821372 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-24 06:58:26 +0000 UTC to 2036-04-21 06:58:26 +0000 UTC (now=2026-04-24 07:14:50.821360734 +0000 UTC))" I0424 07:14:50.821390 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-24 06:58:28 +0000 UTC to 2036-04-21 06:58:28 +0000 UTC (now=2026-04-24 07:14:50.821382004 +0000 UTC))" I0424 07:14:50.821407 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-24 06:58:30 +0000 UTC to 2036-04-21 06:58:30 +0000 UTC (now=2026-04-24 07:14:50.821399315 +0000 UTC))" I0424 07:14:50.821437 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pscaa57d3d5pmhcunl37lfoah11uk1u-kx-062c3ef2e6_customer-system-admin-signer@1777014012\" [] issuer=\"\" (2026-04-24 07:00:13 +0000 UTC to 2026-05-01 07:00:14 +0000 UTC (now=2026-04-24 07:14:50.821426982 +0000 UTC))" I0424 07:14:50.821459 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pscaa57d3d5pmhcunl37lfoah11uk1u-kx-062c3ef2e6_sre-system-admin-signer@1777014012\" [] issuer=\"\" (2026-04-24 07:00:14 +0000 UTC to 2026-05-01 07:00:15 +0000 UTC (now=2026-04-24 07:14:50.821448335 +0000 UTC))" I0424 07:14:50.821480 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 06:58:20 +0000 UTC to 2036-04-21 06:58:20 +0000 UTC (now=2026-04-24 07:14:50.821468843 +0000 UTC))" I0424 07:14:50.821657 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2319175507/tls.crt::/tmp/serving-cert-2319175507/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777014890\" (2026-04-24 07:14:49 +0000 UTC to 2026-04-24 07:14:50 +0000 UTC (now=2026-04-24 07:14:50.821647222 +0000 UTC))" I0424 07:14:50.822087 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777014890\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777014890\" (2026-04-24 06:14:50 +0000 UTC to 2027-04-24 06:14:50 +0000 UTC (now=2026-04-24 07:14:50.822064403 +0000 UTC))" I0424 07:14:50.828236 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.836307 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0424 07:14:50.836319 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0424 07:14:50.836320 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0424 07:14:50.836327 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0424 07:14:50.836329 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 07:14:50.836333 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0424 07:14:50.836338 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0424 07:14:50.836338 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0424 07:14:50.836349 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0424 07:14:50.836354 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0424 07:14:50.836355 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0424 07:14:50.836342 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0424 07:14:50.836365 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0424 07:14:50.836334 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 07:14:50.836375 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0424 07:14:50.836383 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0424 07:14:50.836383 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 07:14:50.836357 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0424 07:14:50.836385 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0424 07:14:50.836363 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0424 07:14:50.836403 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0424 07:14:50.836386 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0424 07:14:50.836404 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0424 07:14:50.836397 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0424 07:14:50.836417 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0424 07:14:50.836419 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0424 07:14:50.836423 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0424 07:14:50.836390 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 07:14:50.836427 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0424 07:14:50.836431 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0424 07:14:50.836407 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0424 07:14:50.836448 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0424 07:14:50.836453 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0424 07:14:50.836453 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0424 07:14:50.836412 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0424 07:14:50.836470 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0424 07:14:50.836431 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 07:14:50.836526 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0424 07:14:50.836532 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0424 07:14:50.836537 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0424 07:14:50.836543 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0424 07:14:50.836547 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0424 07:14:50.836551 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0424 07:14:50.836571 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.836615 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.836621 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.836626 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.836612 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.855637 1 configmap.go:109] updating configmap open-cluster-management-2pscaa57d3d5pmhcunl37lfoah11uk1u/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.856860 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.856927 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.856991 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.857210 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.867128 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0424 07:14:50.870994 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.872457 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.872472 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:50.893981 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 07:14:50.935867 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0424 07:14:50.935882 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0424 07:14:50.935888 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0424 07:14:50.935894 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0424 07:14:50.935898 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0424 07:14:50.935903 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0424 07:14:50.935918 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0424 07:14:50.935927 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0424 07:14:50.947313 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:51.146682 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:51.359805 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:51.556516 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:51.755308 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:51.952149 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:52.150028 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:52.348523 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:52.554286 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:52.751161 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:52.947974 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:53.147080 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:53.354321 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:53.552247 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:53.749191 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:53.946818 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:54.146509 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:54.347715 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:54.550066 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:54.746301 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:54.948502 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0424 07:14:54.948948 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0424 07:14:55.151093 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:55.348971 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:55.550163 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:55.748587 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:55.949205 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0424 07:14:56.150218 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:56.351529 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:56.552060 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:56.747726 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:56.946955 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:57.148939 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:57.349483 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:57.552861 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:57.747048 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0424 07:14:57.951274 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:58.149292 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:58.346065 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:58.547937 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:58.747732 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0424 07:14:58.948753 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:59.148223 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0424 07:14:59.347203 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:59.549297 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:59.747138 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:14:59.946860 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:00.148753 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:00.348717 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:00.551439 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:00.749387 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:00.949635 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:01.149280 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:01.347998 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:01.548638 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:01.747188 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:01.947423 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:02.146483 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:02.347268 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:02.544643 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:02.746454 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:02.945872 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:03.145550 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:03.346628 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:03.544229 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:03.745761 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:03.946944 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:04.145427 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:04.345846 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:04.543970 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:04.743942 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:04.946395 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:05.145490 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0424 07:15:17.096437 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0424 07:15:17.572199 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0424 07:15:17.585766 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0424 07:15:21.746368 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0424 07:15:21.751740 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0424 07:15:52.821962 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0424 07:19:08.811747 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0424 07:21:19.761730 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.734153 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.754400 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.766321 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.785097 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.801664 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.820504 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.833635 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:23.845319 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0424 07:21:46.962483 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0424 07:22:03.955575 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0424 07:22:12.288025 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0424 07:22:16.382792 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0424 07:22:16.464467 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0424 07:22:16.526096 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0424 07:22:16.587162 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0424 07:22:16.669425 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0424 07:22:16.719707 1 configmap.go:109] updating configmap open-cluster-management-2pscaa57d3d5pmhcunl37lfoah11uk1u/config-service-cabundle with the service signing CA bundle I0424 07:22:16.815231 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0424 07:22:16.915061 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0424 07:22:17.019743 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0424 07:22:17.117619 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0424 07:22:17.217301 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0424 07:22:17.314060 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0424 07:22:17.424114 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0424 07:22:17.515641 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0424 07:22:17.774537 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0424 07:26:07.897878 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:07.910384 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:07.926649 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:07.943319 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:08.614814 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:09.229401 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:09.520467 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:09.606251 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:09.983394 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:10.107631 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0424 07:26:11.882282 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0424 07:26:12.033149 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0424 07:26:12.183540 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0424 07:26:12.340698 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0424 07:26:12.526909 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0424 07:26:14.974607 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0424 07:26:15.065421 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0424 07:26:15.163589 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0424 07:26:15.262919 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0424 07:26:15.361948 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0424 07:28:04.757067 1 configmap.go:109] updating configmap default-managed-tenant-p47gb/openshift-service-ca.crt with the service signing CA bundle I0424 07:28:06.084767 1 configmap.go:109] updating configmap default-managed-tenant-p47gb/config-service-cabundle with the service signing CA bundle W0424 07:34:50.894776 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0424 07:54:50.895726 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"