W0424 03:03:10.618215 1 cmd.go:257] Using insecure, self-signed certificates I0424 03:03:10.618486 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776999790 cert, and key in /tmp/serving-cert-707349142/serving-signer.crt, /tmp/serving-cert-707349142/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1776999790" is unset, resetting to 157680000000000000 years! I0424 03:03:11.727785 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0424 03:03:11.728088 1 observer_polling.go:159] Starting file observer I0424 03:03:11.728145 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0424 03:03:11.728158 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0424 03:03:11.728163 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0424 03:03:11.728167 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0424 03:03:11.751772 1 builder.go:304] service-ca-controller version - I0424 03:03:11.752454 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-707349142/tls.crt::/tmp/serving-cert-707349142/tls.key" I0424 03:03:12.420378 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0424 03:03:12.425628 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0424 03:03:12.425647 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0424 03:03:12.425662 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0424 03:03:12.425667 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0424 03:03:12.428871 1 secure_serving.go:57] Forcing use of http/1.1 only I0424 03:03:12.428883 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0424 03:03:12.428892 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0424 03:03:12.428897 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0424 03:03:12.428902 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0424 03:03:12.428904 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0424 03:03:12.428907 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0424 03:03:12.428909 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0424 03:03:12.433513 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0424 03:03:12.433522 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0424 03:03:12.433540 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 03:03:12.433542 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0424 03:03:12.433539 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0424 03:03:12.433553 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 03:03:12.433819 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-707349142/tls.crt::/tmp/serving-cert-707349142/tls.key" I0424 03:03:12.433979 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-707349142/tls.crt::/tmp/serving-cert-707349142/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776999790\" (2026-04-24 03:03:10 +0000 UTC to 2026-04-24 03:03:11 +0000 UTC (now=2026-04-24 03:03:12.433943159 +0000 UTC))" I0424 03:03:12.434167 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776999792\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776999791\" (2026-04-24 02:03:11 +0000 UTC to 2027-04-24 02:03:11 +0000 UTC (now=2026-04-24 03:03:12.434150248 +0000 UTC))" I0424 03:03:12.434188 1 secure_serving.go:213] Serving securely on [::]:8443 I0424 03:03:12.434205 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0424 03:03:12.434219 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0424 03:03:12.434322 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0424 03:03:12.436515 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.436545 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.436576 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.444944 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0424 03:03:12.445021 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"3014edcf-d6cc-4cea-ada8-bdade09ae4c6", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"11628", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-ldsl4_834b84f1-8868-41e5-a078-f5be1b24582a became leader I0424 03:03:12.446057 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0424 03:03:12.446065 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0424 03:03:12.446085 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0424 03:03:12.446060 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0424 03:03:12.446109 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0424 03:03:12.446189 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0424 03:03:12.446472 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0424 03:03:12.446729 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0424 03:03:12.446811 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0424 03:03:12.449163 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.449952 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.450492 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.451326 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.502922 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.534407 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0424 03:03:12.534419 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0424 03:03:12.534429 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0424 03:03:12.534633 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 02:47:13 +0000 UTC to 2036-04-21 02:47:13 +0000 UTC (now=2026-04-24 03:03:12.534598842 +0000 UTC))" I0424 03:03:12.534881 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-707349142/tls.crt::/tmp/serving-cert-707349142/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776999790\" (2026-04-24 03:03:10 +0000 UTC to 2026-04-24 03:03:11 +0000 UTC (now=2026-04-24 03:03:12.53486442 +0000 UTC))" I0424 03:03:12.535065 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776999792\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776999791\" (2026-04-24 02:03:11 +0000 UTC to 2027-04-24 02:03:11 +0000 UTC (now=2026-04-24 03:03:12.535053088 +0000 UTC))" I0424 03:03:12.535205 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-24 02:47:17 +0000 UTC to 2036-04-21 02:47:17 +0000 UTC (now=2026-04-24 03:03:12.535193816 +0000 UTC))" I0424 03:03:12.535238 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-24 02:47:22 +0000 UTC to 2036-04-21 02:47:22 +0000 UTC (now=2026-04-24 03:03:12.53522184 +0000 UTC))" I0424 03:03:12.535266 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-24 02:47:25 +0000 UTC to 2036-04-21 02:47:25 +0000 UTC (now=2026-04-24 03:03:12.535249749 +0000 UTC))" I0424 03:03:12.535292 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-24 02:47:27 +0000 UTC to 2036-04-21 02:47:27 +0000 UTC (now=2026-04-24 03:03:12.535277796 +0000 UTC))" I0424 03:03:12.535323 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-24 02:47:28 +0000 UTC to 2036-04-21 02:47:28 +0000 UTC (now=2026-04-24 03:03:12.535307053 +0000 UTC))" I0424 03:03:12.535360 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ps8kco8hg5kvd6ml19k25vlc7n9266c-kx-3aad8cad42_customer-system-admin-signer@1776998952\" [] issuer=\"\" (2026-04-24 02:49:14 +0000 UTC to 2026-05-01 02:49:15 +0000 UTC (now=2026-04-24 03:03:12.535341791 +0000 UTC))" I0424 03:03:12.535399 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2ps8kco8hg5kvd6ml19k25vlc7n9266c-kx-3aad8cad42_sre-system-admin-signer@1776998952\" [] issuer=\"\" (2026-04-24 02:49:12 +0000 UTC to 2026-05-01 02:49:13 +0000 UTC (now=2026-04-24 03:03:12.535376703 +0000 UTC))" I0424 03:03:12.535427 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-24 02:47:13 +0000 UTC to 2036-04-21 02:47:13 +0000 UTC (now=2026-04-24 03:03:12.535413135 +0000 UTC))" I0424 03:03:12.535594 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-707349142/tls.crt::/tmp/serving-cert-707349142/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776999790\" (2026-04-24 03:03:10 +0000 UTC to 2026-04-24 03:03:11 +0000 UTC (now=2026-04-24 03:03:12.535584323 +0000 UTC))" I0424 03:03:12.535784 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776999792\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776999791\" (2026-04-24 02:03:11 +0000 UTC to 2027-04-24 02:03:11 +0000 UTC (now=2026-04-24 03:03:12.535773529 +0000 UTC))" I0424 03:03:12.546116 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0424 03:03:12.546129 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0424 03:03:12.546135 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0424 03:03:12.546141 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0424 03:03:12.546149 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0424 03:03:12.546153 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0424 03:03:12.546156 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0424 03:03:12.546159 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0424 03:03:12.546143 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0424 03:03:12.546178 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0424 03:03:12.546183 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0424 03:03:12.546186 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0424 03:03:12.546176 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0424 03:03:12.546220 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0424 03:03:12.546237 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0424 03:03:12.546252 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0424 03:03:12.546260 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0424 03:03:12.546265 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0424 03:03:12.546271 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0424 03:03:12.546849 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0424 03:03:12.546859 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0424 03:03:12.546863 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0424 03:03:12.546867 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0424 03:03:12.546870 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0424 03:03:12.546874 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0424 03:03:12.546892 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0424 03:03:12.546896 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0424 03:03:12.546899 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0424 03:03:12.546902 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0424 03:03:12.546905 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0424 03:03:12.546908 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0424 03:03:12.585895 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.646503 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0424 03:03:12.646529 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0424 03:03:12.646538 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0424 03:03:12.646543 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0424 03:03:12.646548 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0424 03:03:12.646551 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0424 03:03:12.646596 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.646604 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.646604 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.646625 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.646709 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0424 03:03:12.646710 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.646724 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 03:03:12.646736 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 03:03:12.646741 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 03:03:12.646745 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 03:03:12.646749 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0424 03:03:12.664226 1 configmap.go:109] updating configmap open-cluster-management-2ps8kco8hg5kvd6ml19k25vlc7n9266c/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.671088 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.672206 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.673121 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.673134 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.678745 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0424 03:03:12.699014 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.704089 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.705385 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.705885 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:12.734515 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0424 03:03:12.746175 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0424 03:03:12.746198 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0424 03:03:12.746208 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0424 03:03:12.746211 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0424 03:03:12.746214 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0424 03:03:12.746216 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0424 03:03:12.746250 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0424 03:03:12.746282 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0424 03:03:12.855036 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:13.058389 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:13.264127 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:13.462975 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:13.658116 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:13.858868 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:14.058871 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:14.257807 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:14.459458 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:14.657386 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:14.858140 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:15.060870 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:15.259025 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:15.456748 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:15.657947 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:15.857899 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:16.059463 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:16.257162 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:16.457373 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:16.658645 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:16.857919 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:17.057793 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle W0424 03:03:17.059256 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0424 03:03:17.258889 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:17.457243 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:17.656926 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0424 03:03:17.858759 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:18.058604 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:18.259069 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:18.459129 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:18.658363 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:18.856592 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:19.058360 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:19.260808 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:19.458018 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0424 03:03:19.657313 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:19.858143 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:20.059598 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:20.258455 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:20.459021 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0424 03:03:20.658776 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:20.860895 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0424 03:03:21.060336 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:21.260316 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:21.462551 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:21.659040 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:21.859656 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:22.056617 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:22.259280 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:22.458708 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:22.660780 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:22.859429 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:23.058436 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:23.261597 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:23.465838 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:23.661023 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:23.858175 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:24.062060 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:24.256946 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:24.455595 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:24.657817 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:24.856675 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:25.056790 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:25.256062 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:25.456023 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:25.656514 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:25.854981 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:26.056470 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:26.255546 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:26.456603 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:26.657254 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:26.856891 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0424 03:03:39.284565 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0424 03:03:39.303735 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0424 03:03:44.510126 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0424 03:03:44.511873 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0424 03:03:55.107578 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0424 03:04:13.879630 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0424 03:07:31.688077 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0424 03:11:20.841600 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.593979 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.604781 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.617533 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.629710 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.639624 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.646771 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.675478 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0424 03:11:24.678861 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0424 03:12:00.764074 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0424 03:12:06.540269 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0424 03:12:20.522231 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0424 03:12:24.222548 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0424 03:12:24.326023 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0424 03:12:24.424790 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0424 03:12:24.520374 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0424 03:12:24.620518 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0424 03:12:24.717968 1 configmap.go:109] updating configmap open-cluster-management-2ps8kco8hg5kvd6ml19k25vlc7n9266c/config-service-cabundle with the service signing CA bundle I0424 03:12:24.816982 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0424 03:12:24.919320 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0424 03:12:25.018794 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0424 03:12:25.121841 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0424 03:12:25.218018 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0424 03:12:25.319336 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0424 03:12:25.417783 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0424 03:12:25.521292 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0424 03:12:25.647532 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0424 03:16:05.181643 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.195504 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.205341 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.223872 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.473920 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.616936 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.666394 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:05.967159 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:06.247854 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:06.542651 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0424 03:16:10.443724 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0424 03:16:10.620617 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0424 03:16:10.761636 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0424 03:16:10.900572 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0424 03:16:11.028722 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0424 03:16:11.125551 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0424 03:16:11.280648 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0424 03:16:11.407925 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0424 03:16:11.505415 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0424 03:16:11.620666 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0424 03:18:08.497583 1 configmap.go:109] updating configmap default-managed-tenant-jr8oa/openshift-service-ca.crt with the service signing CA bundle I0424 03:18:09.737791 1 configmap.go:109] updating configmap default-managed-tenant-jr8oa/config-service-cabundle with the service signing CA bundle W0424 03:23:12.736087 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"