W0505 23:15:47.901457 1 cmd.go:257] Using insecure, self-signed certificates I0505 23:15:47.901716 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778022947 cert, and key in /tmp/serving-cert-160432917/serving-signer.crt, /tmp/serving-cert-160432917/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1778022947" is unset, resetting to 157680000000000000 years! I0505 23:15:48.051863 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0505 23:15:48.052147 1 observer_polling.go:159] Starting file observer I0505 23:15:48.052250 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0505 23:15:48.052263 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0505 23:15:48.052268 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0505 23:15:48.052272 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0505 23:15:48.082163 1 builder.go:304] service-ca-controller version - I0505 23:15:48.083017 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-160432917/tls.crt::/tmp/serving-cert-160432917/tls.key" I0505 23:15:48.466075 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0505 23:15:48.472454 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0505 23:15:48.472473 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0505 23:15:48.472493 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0505 23:15:48.472499 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0505 23:15:48.476324 1 secure_serving.go:57] Forcing use of http/1.1 only I0505 23:15:48.476337 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0505 23:15:48.476350 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0505 23:15:48.476356 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0505 23:15:48.476361 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0505 23:15:48.476364 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0505 23:15:48.476366 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0505 23:15:48.476369 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0505 23:15:48.481903 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0505 23:15:48.481948 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0505 23:15:48.481969 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0505 23:15:48.481980 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0505 23:15:48.482000 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 23:15:48.481990 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 23:15:48.483861 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-160432917/tls.crt::/tmp/serving-cert-160432917/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778022947\" (2026-05-05 23:15:47 +0000 UTC to 2026-05-05 23:15:48 +0000 UTC (now=2026-05-05 23:15:48.483201973 +0000 UTC))" I0505 23:15:48.483950 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-160432917/tls.crt::/tmp/serving-cert-160432917/tls.key" I0505 23:15:48.484435 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778022948\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778022948\" (2026-05-05 22:15:48 +0000 UTC to 2027-05-05 22:15:48 +0000 UTC (now=2026-05-05 23:15:48.484406498 +0000 UTC))" I0505 23:15:48.484466 1 secure_serving.go:213] Serving securely on [::]:8443 I0505 23:15:48.484491 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0505 23:15:48.484512 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0505 23:15:48.485396 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0505 23:15:48.488152 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.488199 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.488219 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.499104 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0505 23:15:48.499175 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"f229f723-0f79-49ae-91c8-5a05ec313514", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9337", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-n7t72_ae7b7358-ffbe-4d42-baab-3b891dd3c18b became leader I0505 23:15:48.500110 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0505 23:15:48.500109 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0505 23:15:48.500126 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0505 23:15:48.500130 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0505 23:15:48.500176 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0505 23:15:48.500218 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0505 23:15:48.500557 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0505 23:15:48.500807 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0505 23:15:48.500872 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0505 23:15:48.508449 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.509149 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.510721 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.511421 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.553232 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.581996 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0505 23:15:48.582034 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 23:15:48.582056 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 23:15:48.582231 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 23:03:54 +0000 UTC to 2036-05-02 23:03:54 +0000 UTC (now=2026-05-05 23:15:48.582205112 +0000 UTC))" I0505 23:15:48.582472 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-160432917/tls.crt::/tmp/serving-cert-160432917/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778022947\" (2026-05-05 23:15:47 +0000 UTC to 2026-05-05 23:15:48 +0000 UTC (now=2026-05-05 23:15:48.582458416 +0000 UTC))" I0505 23:15:48.582651 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778022948\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778022948\" (2026-05-05 22:15:48 +0000 UTC to 2027-05-05 22:15:48 +0000 UTC (now=2026-05-05 23:15:48.582638249 +0000 UTC))" I0505 23:15:48.582799 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-05 23:03:56 +0000 UTC to 2036-05-02 23:03:56 +0000 UTC (now=2026-05-05 23:15:48.582787085 +0000 UTC))" I0505 23:15:48.582830 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-05 23:03:58 +0000 UTC to 2036-05-02 23:03:58 +0000 UTC (now=2026-05-05 23:15:48.58281244 +0000 UTC))" I0505 23:15:48.582850 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-05 23:04:00 +0000 UTC to 2036-05-02 23:04:00 +0000 UTC (now=2026-05-05 23:15:48.582841088 +0000 UTC))" I0505 23:15:48.582865 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-05 23:04:02 +0000 UTC to 2036-05-02 23:04:02 +0000 UTC (now=2026-05-05 23:15:48.582856778 +0000 UTC))" I0505 23:15:48.582879 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-05 23:04:04 +0000 UTC to 2036-05-02 23:04:04 +0000 UTC (now=2026-05-05 23:15:48.582871545 +0000 UTC))" I0505 23:15:48.582904 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q42g1qv9b034r6e5947ge0p9cjkt03e-kx-9cb8ed8f25_customer-system-admin-signer@1778022379\" [] issuer=\"\" (2026-05-05 23:06:19 +0000 UTC to 2026-05-12 23:06:20 +0000 UTC (now=2026-05-05 23:15:48.582888268 +0000 UTC))" I0505 23:15:48.582958 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q42g1qv9b034r6e5947ge0p9cjkt03e-kx-9cb8ed8f25_sre-system-admin-signer@1778022379\" [] issuer=\"\" (2026-05-05 23:06:20 +0000 UTC to 2026-05-12 23:06:21 +0000 UTC (now=2026-05-05 23:15:48.582940463 +0000 UTC))" I0505 23:15:48.582984 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 23:03:54 +0000 UTC to 2036-05-02 23:03:54 +0000 UTC (now=2026-05-05 23:15:48.5829703 +0000 UTC))" I0505 23:15:48.583161 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-160432917/tls.crt::/tmp/serving-cert-160432917/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778022947\" (2026-05-05 23:15:47 +0000 UTC to 2026-05-05 23:15:48 +0000 UTC (now=2026-05-05 23:15:48.58314542 +0000 UTC))" I0505 23:15:48.583333 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778022948\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778022948\" (2026-05-05 22:15:48 +0000 UTC to 2027-05-05 22:15:48 +0000 UTC (now=2026-05-05 23:15:48.583318577 +0000 UTC))" I0505 23:15:48.600351 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0505 23:15:48.600370 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0505 23:15:48.600370 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0505 23:15:48.600383 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0505 23:15:48.600395 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0505 23:15:48.600400 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0505 23:15:48.600404 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0505 23:15:48.600408 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0505 23:15:48.600413 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0505 23:15:48.600386 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0505 23:15:48.600433 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0505 23:15:48.600436 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0505 23:15:48.600439 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0505 23:15:48.600442 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0505 23:15:48.600464 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0505 23:15:48.600378 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0505 23:15:48.600478 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0505 23:15:48.600482 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0505 23:15:48.600486 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0505 23:15:48.601567 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0505 23:15:48.601576 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0505 23:15:48.601581 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0505 23:15:48.601584 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0505 23:15:48.601583 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0505 23:15:48.601595 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0505 23:15:48.601602 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0505 23:15:48.601589 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0505 23:15:48.601606 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0505 23:15:48.601615 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0505 23:15:48.601618 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0505 23:15:48.601635 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0505 23:15:48.610047 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.692266 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 23:15:48.700802 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0505 23:15:48.700817 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0505 23:15:48.700826 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0505 23:15:48.700839 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0505 23:15:48.700842 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0505 23:15:48.700850 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0505 23:15:48.700850 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0505 23:15:48.700855 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0505 23:15:48.700857 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0505 23:15:48.700858 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0505 23:15:48.700862 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0505 23:15:48.700895 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.700896 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0505 23:15:48.700914 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.700830 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... W0505 23:15:48.700950 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0505 23:15:48.700990 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.700987 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 23:15:48.701007 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 23:15:48.701012 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 23:15:48.701016 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 23:15:48.701016 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.701016 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.700862 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0505 23:15:48.701056 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0505 23:15:48.712843 1 configmap.go:109] updating configmap open-cluster-management-2q42g1qv9b034r6e5947ge0p9cjkt03e/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.720186 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.720198 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.720307 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.720313 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.740067 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0505 23:15:48.740105 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.740160 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.740238 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.745810 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:48.912494 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:49.112988 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:49.325877 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:49.515230 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:49.716882 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:49.912809 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:50.112512 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:50.352873 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:50.558383 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:50.717151 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:50.912406 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:51.112484 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:51.317237 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:51.514014 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:51.717284 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:51.912560 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:52.113837 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:52.313753 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:52.515654 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:52.712612 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:52.912795 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:53.113338 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:53.313347 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:53.512308 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:53.715041 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0505 23:15:53.914307 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:54.112328 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:54.313681 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:54.513278 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:54.720100 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:54.914017 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:55.114273 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:55.313268 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:55.516271 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0505 23:15:55.714594 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:55.915561 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:56.112982 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:56.314652 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:56.512723 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0505 23:15:56.720079 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:56.917100 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0505 23:15:57.113757 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:57.309791 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:57.512007 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:57.712247 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:57.915612 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:58.114849 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:58.313986 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:58.512752 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:58.713441 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:58.913679 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:59.111857 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:59.315604 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:59.512299 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:59.713234 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0505 23:15:59.912710 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:00.112707 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:00.310370 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:00.509675 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:00.712859 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:00.913004 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:01.111622 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:01.312058 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:01.510707 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:01.713742 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:01.912541 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:02.112748 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:02.310730 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:02.513032 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:02.711635 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:02.910686 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0505 23:16:19.106359 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0505 23:17:54.434696 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0505 23:17:54.447615 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0505 23:18:01.641124 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0505 23:18:01.647053 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0505 23:19:03.742516 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0505 23:21:48.792300 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0505 23:25:50.472132 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.213056 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.220100 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.238352 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.253118 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.282146 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.294493 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.321752 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0505 23:25:54.353160 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0505 23:26:17.068973 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0505 23:26:40.621969 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0505 23:27:07.513077 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0505 23:27:11.179602 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0505 23:27:11.278681 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0505 23:27:11.379026 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0505 23:27:11.482557 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0505 23:27:11.581161 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0505 23:27:11.683079 1 configmap.go:109] updating configmap open-cluster-management-2q42g1qv9b034r6e5947ge0p9cjkt03e/config-service-cabundle with the service signing CA bundle I0505 23:27:11.782511 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0505 23:27:11.879367 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0505 23:27:11.978248 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0505 23:27:12.077411 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0505 23:27:12.178417 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0505 23:27:12.279044 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0505 23:27:12.380535 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0505 23:27:12.479488 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0505 23:27:12.630641 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0505 23:31:50.612956 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:50.630401 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:50.651381 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:50.665568 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:51.046041 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:51.379135 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:51.566080 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:51.753893 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:52.292838 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0505 23:31:52.364122 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0505 23:31:52.414865 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0505 23:31:52.494764 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0505 23:31:52.584998 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:53.016885 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0505 23:31:55.122875 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0505 23:31:55.199950 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0505 23:31:55.307543 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0505 23:31:55.443898 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0505 23:31:55.523872 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0505 23:31:55.612982 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0505 23:33:49.167953 1 configmap.go:109] updating configmap managed-tenant-cg1ix/openshift-service-ca.crt with the service signing CA bundle I0505 23:33:50.486059 1 configmap.go:109] updating configmap managed-tenant-cg1ix/config-service-cabundle with the service signing CA bundle W0505 23:35:48.693537 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0505 23:55:48.694521 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"