W0429 19:40:50.015787 1 cmd.go:257] Using insecure, self-signed certificates I0429 19:40:50.015998 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777491650 cert, and key in /tmp/serving-cert-2078880245/serving-signer.crt, /tmp/serving-cert-2078880245/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777491650" is unset, resetting to 157680000000000000 years! I0429 19:40:50.458392 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0429 19:40:50.458666 1 observer_polling.go:159] Starting file observer I0429 19:40:50.458754 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0429 19:40:50.458767 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0429 19:40:50.458772 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0429 19:40:50.458776 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0429 19:40:50.482358 1 builder.go:304] service-ca-controller version - I0429 19:40:50.483060 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2078880245/tls.crt::/tmp/serving-cert-2078880245/tls.key" I0429 19:40:50.702300 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0429 19:40:50.708054 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0429 19:40:50.708068 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0429 19:40:50.708089 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0429 19:40:50.708095 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0429 19:40:50.711387 1 secure_serving.go:57] Forcing use of http/1.1 only I0429 19:40:50.711417 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0429 19:40:50.711429 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0429 19:40:50.711434 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0429 19:40:50.711438 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0429 19:40:50.711440 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0429 19:40:50.711443 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0429 19:40:50.711445 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0429 19:40:50.718071 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0429 19:40:50.718913 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0429 19:40:50.718921 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0429 19:40:50.718931 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0429 19:40:50.718948 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0429 19:40:50.718950 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0429 19:40:50.718951 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0429 19:40:50.719916 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2078880245/tls.crt::/tmp/serving-cert-2078880245/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777491650\" (2026-04-29 19:40:49 +0000 UTC to 2026-04-29 19:40:50 +0000 UTC (now=2026-04-29 19:40:50.719893561 +0000 UTC))" I0429 19:40:50.720131 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777491650\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777491650\" (2026-04-29 18:40:50 +0000 UTC to 2027-04-29 18:40:50 +0000 UTC (now=2026-04-29 19:40:50.720114255 +0000 UTC))" I0429 19:40:50.720183 1 secure_serving.go:213] Serving securely on [::]:8443 I0429 19:40:50.720750 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0429 19:40:50.720792 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0429 19:40:50.720744 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2078880245/tls.crt::/tmp/serving-cert-2078880245/tls.key" I0429 19:40:50.726149 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.726246 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.726283 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.733922 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0429 19:40:50.733963 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"ac2b7cf2-645f-4fe1-a021-377d96c472cd", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10545", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-zc444_8aeb0965-5204-4650-90b0-6a56ae293c2d became leader I0429 19:40:50.734858 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0429 19:40:50.734872 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0429 19:40:50.734863 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0429 19:40:50.734886 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0429 19:40:50.734881 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0429 19:40:50.734926 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0429 19:40:50.735344 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0429 19:40:50.735893 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0429 19:40:50.735939 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0429 19:40:50.741468 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.744090 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.744531 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.746726 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.805781 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.819032 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0429 19:40:50.820692 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0429 19:40:50.820917 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0429 19:40:50.821020 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-29 19:28:11 +0000 UTC to 2036-04-26 19:28:11 +0000 UTC (now=2026-04-29 19:40:50.820995853 +0000 UTC))" I0429 19:40:50.821046 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-29 19:28:15 +0000 UTC to 2036-04-26 19:28:15 +0000 UTC (now=2026-04-29 19:40:50.82103594 +0000 UTC))" I0429 19:40:50.821063 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-29 19:28:19 +0000 UTC to 2036-04-26 19:28:19 +0000 UTC (now=2026-04-29 19:40:50.82105557 +0000 UTC))" I0429 19:40:50.821081 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-29 19:28:22 +0000 UTC to 2036-04-26 19:28:22 +0000 UTC (now=2026-04-29 19:40:50.821072481 +0000 UTC))" I0429 19:40:50.821095 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-29 19:28:23 +0000 UTC to 2036-04-26 19:28:23 +0000 UTC (now=2026-04-29 19:40:50.821087482 +0000 UTC))" I0429 19:40:50.821111 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q00ov6e2fiavebm5s2pa9pmf3gbb1m4-kx-187efa5d8b_customer-system-admin-signer@1777491056\" [] issuer=\"\" (2026-04-29 19:30:56 +0000 UTC to 2026-05-06 19:30:57 +0000 UTC (now=2026-04-29 19:40:50.821101601 +0000 UTC))" I0429 19:40:50.821131 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q00ov6e2fiavebm5s2pa9pmf3gbb1m4-kx-187efa5d8b_sre-system-admin-signer@1777491056\" [] issuer=\"\" (2026-04-29 19:30:57 +0000 UTC to 2026-05-06 19:30:58 +0000 UTC (now=2026-04-29 19:40:50.821121562 +0000 UTC))" I0429 19:40:50.821350 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2078880245/tls.crt::/tmp/serving-cert-2078880245/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777491650\" (2026-04-29 19:40:49 +0000 UTC to 2026-04-29 19:40:50 +0000 UTC (now=2026-04-29 19:40:50.821331442 +0000 UTC))" I0429 19:40:50.821636 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777491650\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777491650\" (2026-04-29 18:40:50 +0000 UTC to 2027-04-29 18:40:50 +0000 UTC (now=2026-04-29 19:40:50.821601514 +0000 UTC))" I0429 19:40:50.821839 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-29 19:28:11 +0000 UTC to 2036-04-26 19:28:11 +0000 UTC (now=2026-04-29 19:40:50.821820021 +0000 UTC))" I0429 19:40:50.821884 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-29 19:28:15 +0000 UTC to 2036-04-26 19:28:15 +0000 UTC (now=2026-04-29 19:40:50.821855827 +0000 UTC))" I0429 19:40:50.821912 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-29 19:28:19 +0000 UTC to 2036-04-26 19:28:19 +0000 UTC (now=2026-04-29 19:40:50.821897939 +0000 UTC))" I0429 19:40:50.821938 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-29 19:28:22 +0000 UTC to 2036-04-26 19:28:22 +0000 UTC (now=2026-04-29 19:40:50.821924539 +0000 UTC))" I0429 19:40:50.821975 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-29 19:28:23 +0000 UTC to 2036-04-26 19:28:23 +0000 UTC (now=2026-04-29 19:40:50.821950209 +0000 UTC))" I0429 19:40:50.822022 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q00ov6e2fiavebm5s2pa9pmf3gbb1m4-kx-187efa5d8b_customer-system-admin-signer@1777491056\" [] issuer=\"\" (2026-04-29 19:30:56 +0000 UTC to 2026-05-06 19:30:57 +0000 UTC (now=2026-04-29 19:40:50.821989071 +0000 UTC))" I0429 19:40:50.822051 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q00ov6e2fiavebm5s2pa9pmf3gbb1m4-kx-187efa5d8b_sre-system-admin-signer@1777491056\" [] issuer=\"\" (2026-04-29 19:30:57 +0000 UTC to 2026-05-06 19:30:58 +0000 UTC (now=2026-04-29 19:40:50.82203574 +0000 UTC))" I0429 19:40:50.822077 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-29 19:28:10 +0000 UTC to 2036-04-26 19:28:10 +0000 UTC (now=2026-04-29 19:40:50.82206463 +0000 UTC))" I0429 19:40:50.822351 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2078880245/tls.crt::/tmp/serving-cert-2078880245/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777491650\" (2026-04-29 19:40:49 +0000 UTC to 2026-04-29 19:40:50 +0000 UTC (now=2026-04-29 19:40:50.822333768 +0000 UTC))" I0429 19:40:50.822549 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777491650\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777491650\" (2026-04-29 18:40:50 +0000 UTC to 2027-04-29 18:40:50 +0000 UTC (now=2026-04-29 19:40:50.822537859 +0000 UTC))" I0429 19:40:50.834948 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0429 19:40:50.834963 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0429 19:40:50.834964 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0429 19:40:50.834978 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0429 19:40:50.834985 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0429 19:40:50.834970 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0429 19:40:50.834991 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0429 19:40:50.834989 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0429 19:40:50.834998 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0429 19:40:50.835003 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0429 19:40:50.835010 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0429 19:40:50.835004 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0429 19:40:50.834992 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0429 19:40:50.835023 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0429 19:40:50.835014 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0429 19:40:50.835029 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0429 19:40:50.835034 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0429 19:40:50.835037 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0429 19:40:50.835051 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0429 19:40:50.836554 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0429 19:40:50.836567 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0429 19:40:50.836574 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0429 19:40:50.836572 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0429 19:40:50.836578 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0429 19:40:50.836582 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0429 19:40:50.836582 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0429 19:40:50.836585 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0429 19:40:50.836589 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0429 19:40:50.836593 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0429 19:40:50.836596 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0429 19:40:50.836599 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0429 19:40:50.844227 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.909099 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0429 19:40:50.934926 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0429 19:40:50.934938 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0429 19:40:50.934949 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0429 19:40:50.934957 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0429 19:40:50.934958 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0429 19:40:50.934962 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0429 19:40:50.934965 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0429 19:40:50.934966 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0429 19:40:50.934974 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0429 19:40:50.934979 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0429 19:40:50.934982 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0429 19:40:50.934993 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.934968 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0429 19:40:50.935009 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0429 19:40:50.935032 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0429 19:40:50.935031 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.935043 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0429 19:40:50.935053 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0429 19:40:50.935057 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0429 19:40:50.935062 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0429 19:40:50.935066 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0429 19:40:50.935076 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.935097 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.935110 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle W0429 19:40:50.935121 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0429 19:40:50.947443 1 configmap.go:109] updating configmap open-cluster-management-2q00ov6e2fiavebm5s2pa9pmf3gbb1m4/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.951031 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.951080 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.951121 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.951417 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.965047 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0429 19:40:50.967179 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.971255 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.971298 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:50.971329 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:51.153605 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:51.349821 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:51.549377 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:51.754254 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:51.948349 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:52.147740 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:52.348490 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:52.549334 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:52.748037 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:52.945609 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:53.155552 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:53.347825 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:53.546072 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:53.746680 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:53.946241 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:54.148677 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:54.348389 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:54.546872 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:54.748180 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:54.946160 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:55.146488 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle W0429 19:40:55.147537 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0429 19:40:55.347856 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:55.546078 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:55.747305 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:55.946745 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0429 19:40:56.148495 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:56.347685 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:56.546062 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:56.749724 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:56.949095 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:57.147462 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:57.346469 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:57.548840 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:57.746734 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0429 19:40:57.946118 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:58.147056 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:58.347676 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:58.549164 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:58.746063 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0429 19:40:58.947406 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:59.147096 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0429 19:40:59.349223 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:59.551946 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:59.748844 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:40:59.948762 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:00.149836 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:00.346683 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:00.548360 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:00.746317 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:00.945043 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:01.148052 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:01.348088 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:01.548448 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:01.746134 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:01.945743 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:02.145865 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:02.346147 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:02.543738 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:02.745962 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:02.946506 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:03.146595 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:03.344193 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:03.546312 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:03.745106 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:03.948262 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:04.145952 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:04.346090 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:04.545689 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:04.745550 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:04.945058 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:05.145462 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0429 19:41:12.408046 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0429 19:41:18.822685 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0429 19:41:18.832461 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0429 19:41:24.033553 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0429 19:41:24.033662 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0429 19:41:54.017996 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0429 19:42:53.045531 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0429 19:45:33.995361 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.090124 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.108871 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.126484 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.144207 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.167955 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.228753 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.244761 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0429 19:45:38.261235 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0429 19:46:13.445847 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0429 19:46:24.110112 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0429 19:46:30.265407 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0429 19:46:36.605010 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0429 19:46:36.712750 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0429 19:46:36.795023 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0429 19:46:36.891685 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0429 19:46:36.993387 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0429 19:46:37.093011 1 configmap.go:109] updating configmap open-cluster-management-2q00ov6e2fiavebm5s2pa9pmf3gbb1m4/config-service-cabundle with the service signing CA bundle I0429 19:46:37.194751 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0429 19:46:37.319263 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0429 19:46:37.411768 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0429 19:46:37.502649 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0429 19:46:37.597561 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0429 19:46:37.715733 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0429 19:46:37.804658 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0429 19:46:37.909254 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0429 19:46:38.220114 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0429 19:49:47.551691 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:47.562777 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:47.581877 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:47.607947 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:47.820063 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:47.998805 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:48.090093 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:48.144751 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:48.958638 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:48.965993 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0429 19:49:53.320852 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0429 19:49:53.386291 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0429 19:49:53.446690 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0429 19:49:53.504504 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0429 19:49:53.580100 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0429 19:49:53.685366 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0429 19:49:53.786350 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0429 19:49:53.882690 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0429 19:49:53.982788 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0429 19:49:54.081218 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0429 19:51:55.814781 1 configmap.go:109] updating configmap managed-tenant-7je9l/openshift-service-ca.crt with the service signing CA bundle I0429 19:51:57.064785 1 configmap.go:109] updating configmap managed-tenant-7je9l/config-service-cabundle with the service signing CA bundle W0429 20:00:50.910193 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"