W0418 14:49:18.223401 1 cmd.go:257] Using insecure, self-signed certificates I0418 14:49:18.223609 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776523758 cert, and key in /tmp/serving-cert-3886187210/serving-signer.crt, /tmp/serving-cert-3886187210/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1776523758" is unset, resetting to 157680000000000000 years! I0418 14:49:18.401879 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0418 14:49:18.402222 1 observer_polling.go:159] Starting file observer I0418 14:49:18.402318 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0418 14:49:18.402331 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0418 14:49:18.402336 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0418 14:49:18.402339 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0418 14:49:18.425145 1 builder.go:304] service-ca-controller version - I0418 14:49:18.425822 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3886187210/tls.crt::/tmp/serving-cert-3886187210/tls.key" I0418 14:49:19.321599 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0418 14:49:19.328523 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0418 14:49:19.328538 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0418 14:49:19.328559 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0418 14:49:19.328565 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0418 14:49:19.331883 1 secure_serving.go:57] Forcing use of http/1.1 only I0418 14:49:19.331890 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0418 14:49:19.331907 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0418 14:49:19.331914 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0418 14:49:19.331920 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0418 14:49:19.331924 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0418 14:49:19.331927 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0418 14:49:19.331931 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0418 14:49:19.336168 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0418 14:49:19.336194 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0418 14:49:19.336220 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0418 14:49:19.336227 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0418 14:49:19.336239 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0418 14:49:19.336264 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0418 14:49:19.336491 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3886187210/tls.crt::/tmp/serving-cert-3886187210/tls.key" I0418 14:49:19.336635 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3886187210/tls.crt::/tmp/serving-cert-3886187210/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776523758\" (2026-04-18 14:49:17 +0000 UTC to 2026-04-18 14:49:18 +0000 UTC (now=2026-04-18 14:49:19.336594441 +0000 UTC))" I0418 14:49:19.336729 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0418 14:49:19.336819 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776523759\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776523759\" (2026-04-18 13:49:18 +0000 UTC to 2027-04-18 13:49:18 +0000 UTC (now=2026-04-18 14:49:19.336804936 +0000 UTC))" I0418 14:49:19.336836 1 secure_serving.go:213] Serving securely on [::]:8443 I0418 14:49:19.336854 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0418 14:49:19.336865 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0418 14:49:19.339485 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.339563 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.340220 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.348079 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0418 14:49:19.348139 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"ac6f85ac-56e6-4bd8-b473-e16b0fdf427a", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9543", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-rtpft_a6b28ff1-ddf0-47f7-b899-71f5ed0ef574 became leader I0418 14:49:19.349994 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0418 14:49:19.350150 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0418 14:49:19.350159 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0418 14:49:19.350172 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0418 14:49:19.350153 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0418 14:49:19.350297 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0418 14:49:19.350926 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0418 14:49:19.351181 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0418 14:49:19.351258 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0418 14:49:19.352938 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.355781 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.355857 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.360534 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.403915 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.436322 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0418 14:49:19.436352 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0418 14:49:19.436324 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0418 14:49:19.436560 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-18 14:39:56 +0000 UTC to 2036-04-15 14:39:56 +0000 UTC (now=2026-04-18 14:49:19.43652915 +0000 UTC))" I0418 14:49:19.436776 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3886187210/tls.crt::/tmp/serving-cert-3886187210/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776523758\" (2026-04-18 14:49:17 +0000 UTC to 2026-04-18 14:49:18 +0000 UTC (now=2026-04-18 14:49:19.436762788 +0000 UTC))" I0418 14:49:19.437006 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776523759\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776523759\" (2026-04-18 13:49:18 +0000 UTC to 2027-04-18 13:49:18 +0000 UTC (now=2026-04-18 14:49:19.436986295 +0000 UTC))" I0418 14:49:19.437204 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-18 14:40:00 +0000 UTC to 2036-04-15 14:40:00 +0000 UTC (now=2026-04-18 14:49:19.437189381 +0000 UTC))" I0418 14:49:19.437237 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-18 14:40:03 +0000 UTC to 2036-04-15 14:40:03 +0000 UTC (now=2026-04-18 14:49:19.437220765 +0000 UTC))" I0418 14:49:19.437266 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-18 14:40:05 +0000 UTC to 2036-04-15 14:40:05 +0000 UTC (now=2026-04-18 14:49:19.437252369 +0000 UTC))" I0418 14:49:19.437288 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-18 14:40:09 +0000 UTC to 2036-04-15 14:40:09 +0000 UTC (now=2026-04-18 14:49:19.437278878 +0000 UTC))" I0418 14:49:19.437305 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-18 14:40:11 +0000 UTC to 2036-04-15 14:40:11 +0000 UTC (now=2026-04-18 14:49:19.437297639 +0000 UTC))" I0418 14:49:19.437323 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pokgob5a30o7adolbkai270pogv0d3d-kx-576c01b661_customer-system-admin-signer@1776523318\" [] issuer=\"\" (2026-04-18 14:42:01 +0000 UTC to 2026-04-25 14:42:02 +0000 UTC (now=2026-04-18 14:49:19.437314168 +0000 UTC))" I0418 14:49:19.437353 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pokgob5a30o7adolbkai270pogv0d3d-kx-576c01b661_sre-system-admin-signer@1776523318\" [] issuer=\"\" (2026-04-18 14:41:58 +0000 UTC to 2026-04-25 14:41:59 +0000 UTC (now=2026-04-18 14:49:19.43733179 +0000 UTC))" I0418 14:49:19.437377 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-18 14:39:56 +0000 UTC to 2036-04-15 14:39:56 +0000 UTC (now=2026-04-18 14:49:19.437362487 +0000 UTC))" I0418 14:49:19.437555 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3886187210/tls.crt::/tmp/serving-cert-3886187210/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776523758\" (2026-04-18 14:49:17 +0000 UTC to 2026-04-18 14:49:18 +0000 UTC (now=2026-04-18 14:49:19.437544052 +0000 UTC))" I0418 14:49:19.437746 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776523759\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776523759\" (2026-04-18 13:49:18 +0000 UTC to 2027-04-18 13:49:18 +0000 UTC (now=2026-04-18 14:49:19.437731822 +0000 UTC))" I0418 14:49:19.447406 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.450159 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0418 14:49:19.450172 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0418 14:49:19.450178 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0418 14:49:19.450182 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0418 14:49:19.450184 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0418 14:49:19.450187 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0418 14:49:19.450211 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.450243 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.450264 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.450293 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.450309 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0418 14:49:19.450321 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.450329 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0418 14:49:19.450337 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0418 14:49:19.450341 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0418 14:49:19.450343 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0418 14:49:19.450346 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0418 14:49:19.450366 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0418 14:49:19.450378 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0418 14:49:19.450384 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0418 14:49:19.450388 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0418 14:49:19.450390 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0418 14:49:19.450392 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0418 14:49:19.450399 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0418 14:49:19.450393 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0418 14:49:19.450406 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0418 14:49:19.450411 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0418 14:49:19.450418 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0418 14:49:19.450408 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0418 14:49:19.450429 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0418 14:49:19.450423 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0418 14:49:19.450434 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0418 14:49:19.450440 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0418 14:49:19.450440 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0418 14:49:19.450448 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0418 14:49:19.450447 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0418 14:49:19.451451 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0418 14:49:19.451463 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0418 14:49:19.451470 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0418 14:49:19.451474 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0418 14:49:19.451478 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0418 14:49:19.451482 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0418 14:49:19.451525 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0418 14:49:19.451534 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0418 14:49:19.451540 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0418 14:49:19.451545 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0418 14:49:19.451549 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0418 14:49:19.451553 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0418 14:49:19.461738 1 configmap.go:109] updating configmap open-cluster-management-2pokgob5a30o7adolbkai270pogv0d3d/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.467383 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.468745 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.468748 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.468836 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.472995 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0418 14:49:19.477520 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.479970 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.481183 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.504697 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0418 14:49:19.551210 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0418 14:49:19.551236 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0418 14:49:19.551242 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0418 14:49:19.551246 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0418 14:49:19.551251 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0418 14:49:19.551254 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0418 14:49:19.551284 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0418 14:49:19.551323 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0418 14:49:19.560641 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.765910 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:19.964852 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:20.164239 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:20.367007 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:20.562148 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:20.761027 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:20.962699 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:21.161909 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:21.361706 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:21.560298 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:21.762096 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:21.960994 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:22.161149 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:22.363553 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:22.562427 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:22.762132 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:22.963637 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:23.160151 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:23.362064 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:23.561023 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0418 14:49:23.762207 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0418 14:49:23.762221 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:23.962554 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:24.163652 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:24.362494 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:24.563368 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0418 14:49:24.761465 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:24.963292 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:25.167629 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:25.368870 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:25.561566 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:25.761666 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:25.961249 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:26.164877 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:26.361147 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0418 14:49:26.562210 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:26.763103 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:26.964992 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:27.163140 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:27.364855 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0418 14:49:27.561507 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:27.764144 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0418 14:49:27.962837 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:28.165145 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:28.367223 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:28.561549 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:28.761460 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:28.963382 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:29.161131 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:29.361594 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:29.563189 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:29.762278 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:29.962050 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:30.164353 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:30.364441 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:30.562367 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:30.760606 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:30.961906 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:31.161529 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:31.360468 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:31.560894 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:31.762244 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:31.962094 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:32.159352 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:32.361209 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:32.561372 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:32.760035 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:32.961618 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:33.161230 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:33.360856 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:33.560478 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:33.761894 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0418 14:49:41.797451 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0418 14:49:44.528384 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0418 14:49:44.540577 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0418 14:49:55.696712 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0418 14:49:55.700275 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0418 14:50:29.621450 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0418 14:51:24.222730 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0418 14:56:00.029130 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.249311 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.258710 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.268660 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.280028 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.297241 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.308341 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.320957 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:04.335921 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:39.817421 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:53.104495 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0418 14:56:58.995629 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0418 14:57:02.690000 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0418 14:57:02.764049 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0418 14:57:02.864916 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0418 14:57:02.967354 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0418 14:57:03.065116 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0418 14:57:03.163106 1 configmap.go:109] updating configmap open-cluster-management-2pokgob5a30o7adolbkai270pogv0d3d/config-service-cabundle with the service signing CA bundle I0418 14:57:03.263515 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0418 14:57:03.363725 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0418 14:57:03.462375 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0418 14:57:03.564617 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0418 14:57:03.663042 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0418 14:57:03.763937 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0418 14:57:03.865098 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0418 14:57:03.969433 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0418 14:57:04.092148 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0418 15:00:31.107077 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.116193 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.130400 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.140825 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.475974 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.629159 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.676082 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:31.834776 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:32.392827 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0418 15:00:32.609766 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0418 15:00:32.709734 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0418 15:00:32.809672 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0418 15:00:32.912661 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0418 15:00:35.239768 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0418 15:00:35.292860 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0418 15:00:35.338914 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0418 15:00:35.386503 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0418 15:00:35.487675 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0418 15:02:27.738395 1 configmap.go:109] updating configmap default-managed-tenant-r8i3d/openshift-service-ca.crt with the service signing CA bundle I0418 15:02:29.135105 1 configmap.go:109] updating configmap default-managed-tenant-r8i3d/config-service-cabundle with the service signing CA bundle W0418 15:09:19.505819 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"