W0326 23:35:46.534620 1 cmd.go:257] Using insecure, self-signed certificates I0326 23:35:46.534871 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1774568146 cert, and key in /tmp/serving-cert-3231339382/serving-signer.crt, /tmp/serving-cert-3231339382/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1774568146" is unset, resetting to 157680000000000000 years! I0326 23:35:47.231863 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0326 23:35:47.232197 1 observer_polling.go:159] Starting file observer I0326 23:35:47.232284 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0326 23:35:47.232296 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0326 23:35:47.232301 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0326 23:35:47.232305 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0326 23:35:47.260029 1 builder.go:304] service-ca-controller version - I0326 23:35:47.260702 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3231339382/tls.crt::/tmp/serving-cert-3231339382/tls.key" I0326 23:35:48.150404 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0326 23:35:48.155622 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0326 23:35:48.155637 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0326 23:35:48.155657 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0326 23:35:48.155664 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0326 23:35:48.158652 1 secure_serving.go:57] Forcing use of http/1.1 only I0326 23:35:48.158662 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0326 23:35:48.158676 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0326 23:35:48.158682 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0326 23:35:48.158685 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0326 23:35:48.158688 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0326 23:35:48.158690 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0326 23:35:48.158693 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0326 23:35:48.163112 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0326 23:35:48.163127 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0326 23:35:48.163147 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0326 23:35:48.163148 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0326 23:35:48.163163 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0326 23:35:48.163148 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0326 23:35:48.163451 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3231339382/tls.crt::/tmp/serving-cert-3231339382/tls.key" I0326 23:35:48.163552 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3231339382/tls.crt::/tmp/serving-cert-3231339382/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774568146\" (2026-03-26 23:35:46 +0000 UTC to 2026-03-26 23:35:47 +0000 UTC (now=2026-03-26 23:35:48.163528717 +0000 UTC))" I0326 23:35:48.163715 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774568148\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774568147\" (2026-03-26 22:35:47 +0000 UTC to 2027-03-26 22:35:47 +0000 UTC (now=2026-03-26 23:35:48.163699365 +0000 UTC))" I0326 23:35:48.163735 1 secure_serving.go:213] Serving securely on [::]:8443 I0326 23:35:48.163753 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0326 23:35:48.163766 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0326 23:35:48.163899 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0326 23:35:48.166250 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.166273 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.166383 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.173968 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0326 23:35:48.174027 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"f22ae3be-d648-4e8b-a3f7-bada5ef2a8ec", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10407", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-5fffcf96d8-h6ns4_ff882c2a-9954-4629-b15e-4ec818d52de5 became leader I0326 23:35:48.176533 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0326 23:35:48.176545 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0326 23:35:48.176569 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0326 23:35:48.176576 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0326 23:35:48.176588 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0326 23:35:48.176600 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0326 23:35:48.176972 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0326 23:35:48.177208 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0326 23:35:48.177218 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0326 23:35:48.179279 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.179926 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.181712 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.181956 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.223259 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.263422 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0326 23:35:48.263446 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0326 23:35:48.263480 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0326 23:35:48.263967 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-26 23:24:20 +0000 UTC to 2036-03-23 23:24:20 +0000 UTC (now=2026-03-26 23:35:48.26374235 +0000 UTC))" I0326 23:35:48.264205 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3231339382/tls.crt::/tmp/serving-cert-3231339382/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774568146\" (2026-03-26 23:35:46 +0000 UTC to 2026-03-26 23:35:47 +0000 UTC (now=2026-03-26 23:35:48.264187407 +0000 UTC))" I0326 23:35:48.264364 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774568148\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774568147\" (2026-03-26 22:35:47 +0000 UTC to 2027-03-26 22:35:47 +0000 UTC (now=2026-03-26 23:35:48.264352473 +0000 UTC))" I0326 23:35:48.264502 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-03-26 23:24:22 +0000 UTC to 2036-03-23 23:24:22 +0000 UTC (now=2026-03-26 23:35:48.264479999 +0000 UTC))" I0326 23:35:48.264521 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-03-26 23:24:24 +0000 UTC to 2036-03-23 23:24:24 +0000 UTC (now=2026-03-26 23:35:48.264513072 +0000 UTC))" I0326 23:35:48.264545 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-03-26 23:24:27 +0000 UTC to 2036-03-23 23:24:27 +0000 UTC (now=2026-03-26 23:35:48.264536894 +0000 UTC))" I0326 23:35:48.264562 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-03-26 23:24:30 +0000 UTC to 2036-03-23 23:24:30 +0000 UTC (now=2026-03-26 23:35:48.264554006 +0000 UTC))" I0326 23:35:48.264588 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-03-26 23:24:34 +0000 UTC to 2036-03-23 23:24:34 +0000 UTC (now=2026-03-26 23:35:48.264569609 +0000 UTC))" I0326 23:35:48.264622 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2p9n1c8c9cfpj6p7b17r525iussa5smo-kx-a80a5c6c78_customer-system-admin-signer@1774567584\" [] issuer=\"\" (2026-03-26 23:26:24 +0000 UTC to 2026-04-02 23:26:25 +0000 UTC (now=2026-03-26 23:35:48.264604917 +0000 UTC))" I0326 23:35:48.264643 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2p9n1c8c9cfpj6p7b17r525iussa5smo-kx-a80a5c6c78_sre-system-admin-signer@1774567584\" [] issuer=\"\" (2026-03-26 23:26:26 +0000 UTC to 2026-04-02 23:26:27 +0000 UTC (now=2026-03-26 23:35:48.264632301 +0000 UTC))" I0326 23:35:48.264674 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-26 23:24:20 +0000 UTC to 2036-03-23 23:24:20 +0000 UTC (now=2026-03-26 23:35:48.264658699 +0000 UTC))" I0326 23:35:48.264825 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3231339382/tls.crt::/tmp/serving-cert-3231339382/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774568146\" (2026-03-26 23:35:46 +0000 UTC to 2026-03-26 23:35:47 +0000 UTC (now=2026-03-26 23:35:48.264815381 +0000 UTC))" I0326 23:35:48.264972 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774568148\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774568147\" (2026-03-26 22:35:47 +0000 UTC to 2027-03-26 22:35:47 +0000 UTC (now=2026-03-26 23:35:48.264963169 +0000 UTC))" I0326 23:35:48.265529 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.276766 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0326 23:35:48.276778 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0326 23:35:48.276780 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0326 23:35:48.276790 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0326 23:35:48.276803 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0326 23:35:48.276810 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0326 23:35:48.276809 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0326 23:35:48.276815 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0326 23:35:48.276819 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0326 23:35:48.276792 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0326 23:35:48.276784 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0326 23:35:48.276821 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0326 23:35:48.276838 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0326 23:35:48.276819 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0326 23:35:48.276844 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0326 23:35:48.276847 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.276850 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0326 23:35:48.276830 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0326 23:35:48.276826 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0326 23:35:48.276863 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0326 23:35:48.276868 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0326 23:35:48.276869 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0326 23:35:48.276874 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0326 23:35:48.276875 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0326 23:35:48.276880 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0326 23:35:48.276880 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0326 23:35:48.276856 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0326 23:35:48.276898 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.276840 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0326 23:35:48.276932 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.276945 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.276849 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0326 23:35:48.276931 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.276901 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0326 23:35:48.277047 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0326 23:35:48.277054 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0326 23:35:48.277285 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0326 23:35:48.277294 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0326 23:35:48.277299 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0326 23:35:48.277304 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0326 23:35:48.277309 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0326 23:35:48.277312 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0326 23:35:48.277342 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0326 23:35:48.277349 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0326 23:35:48.277352 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0326 23:35:48.277355 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0326 23:35:48.277357 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0326 23:35:48.277360 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0326 23:35:48.287696 1 configmap.go:109] updating configmap open-cluster-management-2p9n1c8c9cfpj6p7b17r525iussa5smo/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.290614 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.293180 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.293562 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.293851 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.298090 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0326 23:35:48.304587 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.304639 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.307811 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.335203 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0326 23:35:48.376970 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0326 23:35:48.376999 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0326 23:35:48.377008 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0326 23:35:48.377012 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0326 23:35:48.377016 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0326 23:35:48.377019 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0326 23:35:48.377044 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0326 23:35:48.377048 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0326 23:35:48.389489 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.586830 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.796126 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:48.991172 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:49.189341 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:49.389301 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:49.588249 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:49.789367 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:49.989507 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:50.190582 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:50.389843 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:50.588278 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:50.788862 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:50.988555 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:51.189042 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:51.390964 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:51.588048 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:51.790376 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:51.988959 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:52.188047 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:52.388555 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0326 23:35:52.390703 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0326 23:35:52.589128 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:52.789777 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:52.986785 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:53.188914 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:53.387928 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0326 23:35:53.590774 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:53.789568 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:53.987420 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:54.189125 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:54.389479 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:54.589830 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:54.794033 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:54.990112 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:55.190118 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0326 23:35:55.388872 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:55.588899 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:55.786281 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:55.988436 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:56.188571 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0326 23:35:56.389865 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:56.587751 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0326 23:35:56.786196 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:56.989369 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:57.188068 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:57.393260 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:57.590602 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:57.788640 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:57.988808 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:58.188874 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:58.388567 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:58.588966 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:58.788708 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:58.988050 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:59.195447 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:59.386284 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:59.586618 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:59.786802 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0326 23:35:59.988407 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:00.186407 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:00.385692 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:00.585981 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:00.807612 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:00.987039 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:01.185748 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:01.385715 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:01.586189 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:01.792896 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:01.988570 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:02.196815 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:02.387557 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:02.585874 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0326 23:36:15.857199 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0326 23:36:15.867275 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0326 23:36:21.031295 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0326 23:36:21.034863 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0326 23:36:41.891823 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0326 23:36:53.034609 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0326 23:37:49.459306 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0326 23:40:49.055055 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.789887 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.800153 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.821221 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.836164 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.842675 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.855933 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.861738 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0326 23:40:52.870720 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0326 23:41:32.034878 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0326 23:41:55.277822 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0326 23:42:04.141018 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0326 23:42:07.919464 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0326 23:42:08.010248 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0326 23:42:08.123524 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0326 23:42:08.216068 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0326 23:42:08.312089 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0326 23:42:08.411240 1 configmap.go:109] updating configmap open-cluster-management-2p9n1c8c9cfpj6p7b17r525iussa5smo/config-service-cabundle with the service signing CA bundle I0326 23:42:08.509896 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0326 23:42:08.611408 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0326 23:42:08.710543 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0326 23:42:08.812241 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0326 23:42:08.912870 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0326 23:42:09.009754 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0326 23:42:09.112229 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0326 23:42:09.213164 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0326 23:42:09.353154 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0326 23:47:11.005310 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:11.025810 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:11.046802 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:11.642924 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:12.134146 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:12.255531 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:12.350123 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:12.688063 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:12.847927 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0326 23:47:14.225117 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0326 23:47:14.405303 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0326 23:47:14.638823 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0326 23:47:17.049348 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0326 23:47:17.141360 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0326 23:47:17.240604 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0326 23:47:17.346399 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0326 23:47:17.443636 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0326 23:47:17.543517 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle W0326 23:55:48.336646 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0326 23:58:13.564598 1 configmap.go:109] updating configmap default-tenant-managed/openshift-service-ca.crt with the service signing CA bundle I0326 23:58:14.954493 1 configmap.go:109] updating configmap default-tenant-managed/config-service-cabundle with the service signing CA bundle