W0425 19:02:50.543434 1 cmd.go:257] Using insecure, self-signed certificates I0425 19:02:50.543695 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777143770 cert, and key in /tmp/serving-cert-3948813936/serving-signer.crt, /tmp/serving-cert-3948813936/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777143770" is unset, resetting to 157680000000000000 years! I0425 19:02:51.149150 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0425 19:02:51.149439 1 observer_polling.go:159] Starting file observer I0425 19:02:51.149485 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0425 19:02:51.149499 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0425 19:02:51.149504 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0425 19:02:51.149508 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0425 19:02:51.180670 1 builder.go:304] service-ca-controller version - I0425 19:02:51.181330 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3948813936/tls.crt::/tmp/serving-cert-3948813936/tls.key" I0425 19:02:51.894500 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0425 19:02:51.899497 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0425 19:02:51.899515 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0425 19:02:51.899546 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0425 19:02:51.899553 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0425 19:02:51.902811 1 secure_serving.go:57] Forcing use of http/1.1 only W0425 19:02:51.902828 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. I0425 19:02:51.902828 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0425 19:02:51.902832 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0425 19:02:51.902840 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0425 19:02:51.902843 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0425 19:02:51.902845 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0425 19:02:51.902847 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0425 19:02:51.906946 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0425 19:02:51.906975 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0425 19:02:51.907023 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0425 19:02:51.907036 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0425 19:02:51.907049 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0425 19:02:51.907052 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0425 19:02:51.907228 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3948813936/tls.crt::/tmp/serving-cert-3948813936/tls.key" I0425 19:02:51.907377 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3948813936/tls.crt::/tmp/serving-cert-3948813936/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777143770\" (2026-04-25 19:02:50 +0000 UTC to 2026-04-25 19:02:51 +0000 UTC (now=2026-04-25 19:02:51.907332969 +0000 UTC))" I0425 19:02:51.907562 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777143771\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777143771\" (2026-04-25 18:02:51 +0000 UTC to 2027-04-25 18:02:51 +0000 UTC (now=2026-04-25 19:02:51.907543612 +0000 UTC))" I0425 19:02:51.907566 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0425 19:02:51.907578 1 secure_serving.go:213] Serving securely on [::]:8443 I0425 19:02:51.907597 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0425 19:02:51.907628 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0425 19:02:51.911508 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.911522 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.911258 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.919187 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0425 19:02:51.919240 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"68ad40ce-99a1-423c-b314-a69dab15a844", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9827", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-55zfb_8ba9ec75-d957-4ea0-aeab-94c225740e63 became leader I0425 19:02:51.920108 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0425 19:02:51.920121 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0425 19:02:51.920111 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0425 19:02:51.920127 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0425 19:02:51.920146 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0425 19:02:51.920218 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0425 19:02:51.920533 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0425 19:02:51.920788 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0425 19:02:51.920856 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0425 19:02:51.924073 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.925820 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.926979 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.928448 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:51.971386 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:52.007247 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0425 19:02:52.007262 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0425 19:02:52.007340 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0425 19:02:52.007430 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-25 18:50:45 +0000 UTC to 2036-04-22 18:50:45 +0000 UTC (now=2026-04-25 19:02:52.0074061 +0000 UTC))" I0425 19:02:52.007636 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3948813936/tls.crt::/tmp/serving-cert-3948813936/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777143770\" (2026-04-25 19:02:50 +0000 UTC to 2026-04-25 19:02:51 +0000 UTC (now=2026-04-25 19:02:52.007622715 +0000 UTC))" I0425 19:02:52.007816 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777143771\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777143771\" (2026-04-25 18:02:51 +0000 UTC to 2027-04-25 18:02:51 +0000 UTC (now=2026-04-25 19:02:52.007803482 +0000 UTC))" I0425 19:02:52.007938 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-25 18:50:48 +0000 UTC to 2036-04-22 18:50:48 +0000 UTC (now=2026-04-25 19:02:52.007926706 +0000 UTC))" I0425 19:02:52.007958 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-25 18:50:53 +0000 UTC to 2036-04-22 18:50:53 +0000 UTC (now=2026-04-25 19:02:52.007948745 +0000 UTC))" I0425 19:02:52.007974 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-25 18:50:54 +0000 UTC to 2036-04-22 18:50:54 +0000 UTC (now=2026-04-25 19:02:52.007965667 +0000 UTC))" I0425 19:02:52.007991 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-25 18:50:56 +0000 UTC to 2036-04-22 18:50:56 +0000 UTC (now=2026-04-25 19:02:52.007983363 +0000 UTC))" I0425 19:02:52.008008 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-25 18:50:57 +0000 UTC to 2036-04-22 18:50:57 +0000 UTC (now=2026-04-25 19:02:52.007997085 +0000 UTC))" I0425 19:02:52.008026 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ptbrbtrkse8oprj72132qqb50utdbg2-kx-5860d6f123_customer-system-admin-signer@1777143185\" [] issuer=\"\" (2026-04-25 18:53:06 +0000 UTC to 2026-05-02 18:53:07 +0000 UTC (now=2026-04-25 19:02:52.008016961 +0000 UTC))" I0425 19:02:52.008053 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ptbrbtrkse8oprj72132qqb50utdbg2-kx-5860d6f123_sre-system-admin-signer@1777143185\" [] issuer=\"\" (2026-04-25 18:53:05 +0000 UTC to 2026-05-02 18:53:06 +0000 UTC (now=2026-04-25 19:02:52.008036833 +0000 UTC))" I0425 19:02:52.008070 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-25 18:50:45 +0000 UTC to 2036-04-22 18:50:45 +0000 UTC (now=2026-04-25 19:02:52.008061779 +0000 UTC))" I0425 19:02:52.008223 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3948813936/tls.crt::/tmp/serving-cert-3948813936/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777143770\" (2026-04-25 19:02:50 +0000 UTC to 2026-04-25 19:02:51 +0000 UTC (now=2026-04-25 19:02:52.008214043 +0000 UTC))" I0425 19:02:52.008381 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777143771\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777143771\" (2026-04-25 18:02:51 +0000 UTC to 2027-04-25 18:02:51 +0000 UTC (now=2026-04-25 19:02:52.008371061 +0000 UTC))" I0425 19:02:52.020173 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0425 19:02:52.020186 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0425 19:02:52.020193 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0425 19:02:52.020197 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0425 19:02:52.020200 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0425 19:02:52.020203 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0425 19:02:52.020239 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0425 19:02:52.020318 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0425 19:02:52.020340 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0425 19:02:52.020335 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0425 19:02:52.020353 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0425 19:02:52.020346 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0425 19:02:52.020359 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0425 19:02:52.020360 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0425 19:02:52.020363 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0425 19:02:52.020365 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0425 19:02:52.020367 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0425 19:02:52.020369 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0425 19:02:52.020373 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0425 19:02:52.020866 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0425 19:02:52.020880 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0425 19:02:52.020886 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0425 19:02:52.020889 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0425 19:02:52.020892 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0425 19:02:52.020895 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0425 19:02:52.020934 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0425 19:02:52.020940 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0425 19:02:52.020944 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0425 19:02:52.020947 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0425 19:02:52.020950 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0425 19:02:52.020953 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0425 19:02:52.028466 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:52.120659 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0425 19:02:52.120683 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0425 19:02:52.120682 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0425 19:02:52.120704 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0425 19:02:52.120713 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0425 19:02:52.120719 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0425 19:02:52.120720 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.120724 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0425 19:02:52.120729 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0425 19:02:52.120692 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0425 19:02:52.120768 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0425 19:02:52.120774 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0425 19:02:52.120779 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0425 19:02:52.120809 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.120823 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.120826 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.120871 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.124705 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0425 19:02:52.136872 1 configmap.go:109] updating configmap open-cluster-management-2ptbrbtrkse8oprj72132qqb50utdbg2/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.142767 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.142778 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.145323 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.145329 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.154678 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0425 19:02:52.160409 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.163470 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.163633 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.163673 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.220742 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0425 19:02:52.220787 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0425 19:02:52.220799 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0425 19:02:52.220805 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0425 19:02:52.220809 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0425 19:02:52.220811 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0425 19:02:52.220847 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0425 19:02:52.220893 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0425 19:02:52.329547 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.533196 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.752335 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:52.957529 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:53.132385 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:53.331504 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:53.531635 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:53.731239 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:53.932012 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:54.136208 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:54.331083 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:54.533635 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:54.733083 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:54.931912 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:55.133967 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:55.329960 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:55.532669 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:55.734053 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:55.932079 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:56.134554 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:56.331157 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:56.531254 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:56.731513 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:56.930921 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:57.132846 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0425 19:02:57.332692 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:57.533005 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:57.733038 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:57.932189 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:58.130607 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:58.330461 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:58.531865 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:58.733428 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:58.934994 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0425 19:02:59.133037 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:59.330812 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:59.531442 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:59.732123 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0425 19:02:59.931556 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0425 19:03:00.131113 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:00.333392 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0425 19:03:00.531511 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:00.732073 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:00.931690 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:01.133852 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:01.335328 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:01.532856 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:01.746662 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:01.933291 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:02.133263 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:02.331953 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:02.531132 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:02.736540 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:02.933884 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:03.131811 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:03.333222 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:03.534060 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:03.731724 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:03.931458 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:04.132719 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:04.331178 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:04.531845 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:04.730906 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:04.929429 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:05.132487 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:05.332964 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:05.531419 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:05.730786 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:05.931401 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:06.129747 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:06.331003 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0425 19:03:14.526726 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0425 19:03:22.034890 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0425 19:03:22.047177 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0425 19:03:30.210609 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0425 19:03:30.211831 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0425 19:04:05.164952 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0425 19:04:34.889397 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0425 19:10:45.588138 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.163492 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.172354 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.186498 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.195628 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.210300 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.218185 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.233521 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0425 19:10:49.241167 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0425 19:11:14.696329 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0425 19:11:33.045352 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0425 19:11:52.112373 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0425 19:11:55.784966 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0425 19:11:55.886363 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0425 19:11:55.980837 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0425 19:11:56.080556 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0425 19:11:56.189367 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0425 19:11:56.291579 1 configmap.go:109] updating configmap open-cluster-management-2ptbrbtrkse8oprj72132qqb50utdbg2/config-service-cabundle with the service signing CA bundle I0425 19:11:56.380899 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0425 19:11:56.482119 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0425 19:11:56.582112 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0425 19:11:56.681226 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0425 19:11:56.781412 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0425 19:11:56.882534 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0425 19:11:56.981488 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0425 19:11:57.090932 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0425 19:11:57.249455 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0425 19:15:41.617280 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:41.625505 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:41.637099 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:41.654145 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:41.965485 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:42.098353 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:42.151625 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:42.265906 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:42.795459 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:42.992352 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0425 19:15:46.908075 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0425 19:15:46.982519 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0425 19:15:47.159032 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0425 19:15:47.257462 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0425 19:15:47.334598 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0425 19:15:47.394340 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0425 19:15:47.444479 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0425 19:15:47.495716 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0425 19:15:47.587854 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0425 19:15:47.685942 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0425 19:17:32.201925 1 configmap.go:109] updating configmap default-managed-tenant-xjvnb/openshift-service-ca.crt with the service signing CA bundle I0425 19:17:33.439646 1 configmap.go:109] updating configmap default-managed-tenant-xjvnb/config-service-cabundle with the service signing CA bundle W0425 19:22:52.125973 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0425 19:42:52.126421 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"