W0427 16:15:34.243182 1 cmd.go:257] Using insecure, self-signed certificates I0427 16:15:34.243444 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777306534 cert, and key in /tmp/serving-cert-3680384963/serving-signer.crt, /tmp/serving-cert-3680384963/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777306534" is unset, resetting to 157680000000000000 years! I0427 16:15:34.600567 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0427 16:15:34.600854 1 observer_polling.go:159] Starting file observer I0427 16:15:34.600904 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0427 16:15:34.600916 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0427 16:15:34.600920 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0427 16:15:34.600927 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0427 16:15:34.629287 1 builder.go:304] service-ca-controller version - I0427 16:15:34.629876 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3680384963/tls.crt::/tmp/serving-cert-3680384963/tls.key" I0427 16:15:34.951022 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0427 16:15:34.961760 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0427 16:15:34.961775 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0427 16:15:34.961794 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0427 16:15:34.961799 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0427 16:15:34.967024 1 secure_serving.go:57] Forcing use of http/1.1 only I0427 16:15:34.967033 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0427 16:15:34.967043 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0427 16:15:34.967048 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0427 16:15:34.967053 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0427 16:15:34.967055 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0427 16:15:34.967058 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0427 16:15:34.967060 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0427 16:15:34.972949 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0427 16:15:34.972983 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0427 16:15:34.973013 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0427 16:15:34.973022 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0427 16:15:34.973033 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0427 16:15:34.973037 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0427 16:15:34.973354 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3680384963/tls.crt::/tmp/serving-cert-3680384963/tls.key" I0427 16:15:34.973531 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3680384963/tls.crt::/tmp/serving-cert-3680384963/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777306534\" (2026-04-27 16:15:33 +0000 UTC to 2026-04-27 16:15:34 +0000 UTC (now=2026-04-27 16:15:34.973501702 +0000 UTC))" I0427 16:15:34.973793 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777306534\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777306534\" (2026-04-27 15:15:34 +0000 UTC to 2027-04-27 15:15:34 +0000 UTC (now=2026-04-27 16:15:34.973771264 +0000 UTC))" I0427 16:15:34.973818 1 secure_serving.go:213] Serving securely on [::]:8443 I0427 16:15:34.973841 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0427 16:15:34.973858 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0427 16:15:34.974242 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0427 16:15:34.976553 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:34.976554 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:34.976657 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:34.987171 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0427 16:15:34.987300 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"64ba0657-3442-4f55-92c6-97bc5506560c", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"12043", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-g5bg5_66c03dd6-2945-4741-8541-088f0fcc1d67 became leader I0427 16:15:34.988066 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0427 16:15:34.988086 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0427 16:15:34.988067 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0427 16:15:34.988115 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0427 16:15:34.988148 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0427 16:15:34.988222 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0427 16:15:34.988518 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0427 16:15:34.988740 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0427 16:15:34.988763 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0427 16:15:34.994365 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:34.994818 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:34.994819 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:35.020042 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:35.073830 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0427 16:15:35.073838 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0427 16:15:35.073851 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0427 16:15:35.074401 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-27 15:56:24 +0000 UTC to 2036-04-24 15:56:24 +0000 UTC (now=2026-04-27 16:15:35.074351811 +0000 UTC))" I0427 16:15:35.074830 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3680384963/tls.crt::/tmp/serving-cert-3680384963/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777306534\" (2026-04-27 16:15:33 +0000 UTC to 2026-04-27 16:15:34 +0000 UTC (now=2026-04-27 16:15:35.074777779 +0000 UTC))" I0427 16:15:35.075251 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777306534\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777306534\" (2026-04-27 15:15:34 +0000 UTC to 2027-04-27 15:15:34 +0000 UTC (now=2026-04-27 16:15:35.075226561 +0000 UTC))" I0427 16:15:35.075398 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-27 15:56:26 +0000 UTC to 2036-04-24 15:56:26 +0000 UTC (now=2026-04-27 16:15:35.075380391 +0000 UTC))" I0427 16:15:35.075422 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-27 15:56:29 +0000 UTC to 2036-04-24 15:56:29 +0000 UTC (now=2026-04-27 16:15:35.075413551 +0000 UTC))" I0427 16:15:35.075444 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-27 15:56:32 +0000 UTC to 2036-04-24 15:56:32 +0000 UTC (now=2026-04-27 16:15:35.075428839 +0000 UTC))" I0427 16:15:35.075470 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-27 15:56:35 +0000 UTC to 2036-04-24 15:56:35 +0000 UTC (now=2026-04-27 16:15:35.075455115 +0000 UTC))" I0427 16:15:35.075498 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-27 15:56:37 +0000 UTC to 2036-04-24 15:56:37 +0000 UTC (now=2026-04-27 16:15:35.075489744 +0000 UTC))" I0427 16:15:35.075516 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pujfmsfl53b5g7k4p2o3ab2nokd74cv-kx-6e39b5485f_customer-system-admin-signer@1777305540\" [] issuer=\"\" (2026-04-27 15:59:02 +0000 UTC to 2026-05-04 15:59:03 +0000 UTC (now=2026-04-27 16:15:35.075505805 +0000 UTC))" I0427 16:15:35.075536 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pujfmsfl53b5g7k4p2o3ab2nokd74cv-kx-6e39b5485f_sre-system-admin-signer@1777305540\" [] issuer=\"\" (2026-04-27 15:59:02 +0000 UTC to 2026-05-04 15:59:03 +0000 UTC (now=2026-04-27 16:15:35.075526813 +0000 UTC))" I0427 16:15:35.075561 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-27 15:56:24 +0000 UTC to 2036-04-24 15:56:24 +0000 UTC (now=2026-04-27 16:15:35.075550017 +0000 UTC))" I0427 16:15:35.075733 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3680384963/tls.crt::/tmp/serving-cert-3680384963/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777306534\" (2026-04-27 16:15:33 +0000 UTC to 2026-04-27 16:15:34 +0000 UTC (now=2026-04-27 16:15:35.075723197 +0000 UTC))" I0427 16:15:35.075900 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777306534\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777306534\" (2026-04-27 15:15:34 +0000 UTC to 2027-04-27 15:15:34 +0000 UTC (now=2026-04-27 16:15:35.07588558 +0000 UTC))" I0427 16:15:35.088881 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0427 16:15:35.088896 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0427 16:15:35.088903 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0427 16:15:35.088900 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0427 16:15:35.088912 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0427 16:15:35.088919 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0427 16:15:35.088922 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0427 16:15:35.088906 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0427 16:15:35.088928 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0427 16:15:35.088932 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0427 16:15:35.088925 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0427 16:15:35.088944 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0427 16:15:35.088946 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0427 16:15:35.089001 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0427 16:15:35.089014 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0427 16:15:35.089019 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0427 16:15:35.089023 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0427 16:15:35.089026 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0427 16:15:35.089029 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0427 16:15:35.128211 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:35.165167 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:35.188763 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0427 16:15:35.188777 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0427 16:15:35.188778 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0427 16:15:35.188792 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0427 16:15:35.188784 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0427 16:15:35.188801 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0427 16:15:35.188803 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0427 16:15:35.188806 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0427 16:15:35.188811 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0427 16:15:35.188815 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0427 16:15:35.188829 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0427 16:15:35.188807 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0427 16:15:35.188835 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0427 16:15:35.188842 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0427 16:15:35.188848 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0427 16:15:35.188853 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0427 16:15:35.188836 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0427 16:15:35.188859 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0427 16:15:35.188851 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0427 16:15:35.188873 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0427 16:15:35.188878 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0427 16:15:35.188881 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0427 16:15:35.188884 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0427 16:15:35.188886 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0427 16:15:35.188894 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.188900 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.188906 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.188993 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.188898 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.232256 1 configmap.go:109] updating configmap open-cluster-management-2pujfmsfl53b5g7k4p2o3ab2nokd74cv/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.233651 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.243039 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.243140 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.246031 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.257943 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0427 16:15:35.260273 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.264175 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.266810 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.266896 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.354435 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0427 16:15:35.388938 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0427 16:15:35.388953 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0427 16:15:35.388961 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0427 16:15:35.388979 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0427 16:15:35.388985 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0427 16:15:35.388989 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0427 16:15:35.389013 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0427 16:15:35.389031 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0427 16:15:35.398958 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.600337 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:35.801134 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:36.022857 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:36.214700 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:36.402684 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:36.600888 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:36.833336 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:37.003390 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:37.201466 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:37.403229 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:37.602393 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:37.802167 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:38.001057 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:38.202069 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:38.400919 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:38.601254 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:38.802189 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:39.001006 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:39.200919 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:39.400595 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:39.601036 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:39.802037 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:40.003762 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:40.201610 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0427 16:15:40.404689 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:40.602954 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:40.803163 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:41.000145 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:41.202474 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:41.401064 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:41.600698 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:41.802258 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:42.005097 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0427 16:15:42.211573 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:42.408191 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:42.602482 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:42.801947 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:43.002495 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0427 16:15:43.200243 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:43.401248 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0427 16:15:43.602438 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:43.800096 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:44.001191 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:44.202639 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:44.403879 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:44.602131 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:44.802508 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:45.002046 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:45.202509 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:45.400479 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:45.600510 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:45.801220 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:46.001443 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:46.201829 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:46.400779 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:46.601004 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:46.800523 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:46.999035 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:47.200336 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:47.401236 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:47.600164 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:47.799268 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:48.000142 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:48.199398 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:48.406871 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:48.601277 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:48.799670 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:49.000514 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:49.200543 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0427 16:15:49.399940 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0427 16:16:13.113928 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0427 16:16:13.135465 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0427 16:16:18.534120 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0427 16:16:19.346718 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0427 16:16:19.349348 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0427 16:16:49.470454 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0427 16:20:06.706518 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0427 16:25:41.965094 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.725419 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.751136 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.771960 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.792609 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.807138 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.827102 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.864278 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:25:45.889548 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0427 16:26:20.680265 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0427 16:26:37.518019 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0427 16:26:40.193032 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0427 16:26:44.130710 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0427 16:26:44.241665 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0427 16:26:44.323006 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0427 16:26:44.423165 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0427 16:26:44.523351 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0427 16:26:44.625082 1 configmap.go:109] updating configmap open-cluster-management-2pujfmsfl53b5g7k4p2o3ab2nokd74cv/config-service-cabundle with the service signing CA bundle I0427 16:26:44.726288 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0427 16:26:44.824440 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0427 16:26:44.926155 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0427 16:26:45.023015 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0427 16:26:45.124315 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0427 16:26:45.225149 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0427 16:26:45.324352 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0427 16:26:45.422908 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0427 16:26:45.561225 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0427 16:30:13.729992 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:13.738436 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:13.756246 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:13.768675 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:14.228353 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:14.969754 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:15.098861 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:15.440185 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:15.605984 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0427 16:30:15.746798 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0427 16:30:15.848943 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0427 16:30:15.869011 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:15.959996 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0427 16:30:16.071024 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0427 16:30:18.483057 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0427 16:30:18.564712 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0427 16:30:18.669330 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0427 16:30:18.763293 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0427 16:30:18.863821 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0427 16:30:18.965268 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0427 16:32:14.315095 1 configmap.go:109] updating configmap default-managed-tenant-y0rlz/openshift-service-ca.crt with the service signing CA bundle I0427 16:32:15.561165 1 configmap.go:109] updating configmap default-managed-tenant-y0rlz/config-service-cabundle with the service signing CA bundle W0427 16:35:35.355862 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"