W0504 20:32:00.752169       1 cmd.go:257] Using insecure, self-signed certificates
I0504 20:32:00.752351       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777926720 cert, and key in /tmp/serving-cert-1654936039/serving-signer.crt, /tmp/serving-cert-1654936039/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1777926720" is unset, resetting to 157680000000000000 years!
I0504 20:32:01.311788       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0504 20:32:01.312147       1 observer_polling.go:159] Starting file observer
I0504 20:32:01.312214       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0504 20:32:01.312227       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0504 20:32:01.312231       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0504 20:32:01.312235       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0504 20:32:01.343959       1 builder.go:304] service-ca-controller version -
I0504 20:32:01.344591       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1654936039/tls.crt::/tmp/serving-cert-1654936039/tls.key"
I0504 20:32:01.644992       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0504 20:32:01.651701       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0504 20:32:01.651716       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0504 20:32:01.651739       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0504 20:32:01.651743       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0504 20:32:01.654797       1 secure_serving.go:57] Forcing use of http/1.1 only
I0504 20:32:01.654811       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0504 20:32:01.654814       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0504 20:32:01.654825       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0504 20:32:01.654829       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0504 20:32:01.654839       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0504 20:32:01.654844       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0504 20:32:01.654846       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0504 20:32:01.660953       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0504 20:32:01.660968       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0504 20:32:01.660980       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0504 20:32:01.660985       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0504 20:32:01.660985       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0504 20:32:01.661002       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0504 20:32:01.661429       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1654936039/tls.crt::/tmp/serving-cert-1654936039/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777926720\" (2026-05-04 20:32:00 +0000 UTC to 2026-05-04 20:32:01 +0000 UTC (now=2026-05-04 20:32:01.661369532 +0000 UTC))"
I0504 20:32:01.662483       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777926721\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777926721\" (2026-05-04 19:32:01 +0000 UTC to 2027-05-04 19:32:01 +0000 UTC (now=2026-05-04 20:32:01.662438172 +0000 UTC))"
I0504 20:32:01.662511       1 secure_serving.go:213] Serving securely on [::]:8443
I0504 20:32:01.662537       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0504 20:32:01.662604       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0504 20:32:01.662088       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1654936039/tls.crt::/tmp/serving-cert-1654936039/tls.key"
I0504 20:32:01.663559       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0504 20:32:01.665598       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.665714       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.666576       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.679304       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0504 20:32:01.679352       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"4c229dcc-28a4-4447-ad78-e079a495c4d7", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9517", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-ltll6_b5ae0d96-96dd-49eb-8649-db71c549487f became leader
I0504 20:32:01.680235       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0504 20:32:01.680242       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0504 20:32:01.680249       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0504 20:32:01.680269       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0504 20:32:01.680277       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0504 20:32:01.680358       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0504 20:32:01.680653       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0504 20:32:01.680868       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0504 20:32:01.680885       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0504 20:32:01.690715       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.694723       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.695145       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.695365       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.761080       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0504 20:32:01.761161       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0504 20:32:01.761181       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0504 20:32:01.761308       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:26 +0000 UTC to 2036-05-01 20:22:26 +0000 UTC (now=2026-05-04 20:32:01.761289722 +0000 UTC))"
I0504 20:32:01.761492       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1654936039/tls.crt::/tmp/serving-cert-1654936039/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777926720\" (2026-05-04 20:32:00 +0000 UTC to 2026-05-04 20:32:01 +0000 UTC (now=2026-05-04 20:32:01.761480588 +0000 UTC))"
I0504 20:32:01.761646       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777926721\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777926721\" (2026-05-04 19:32:01 +0000 UTC to 2027-05-04 19:32:01 +0000 UTC (now=2026-05-04 20:32:01.761635658 +0000 UTC))"
I0504 20:32:01.761775       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:29 +0000 UTC to 2036-05-01 20:22:29 +0000 UTC (now=2026-05-04 20:32:01.761764228 +0000 UTC))"
I0504 20:32:01.761795       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:33 +0000 UTC to 2036-05-01 20:22:33 +0000 UTC (now=2026-05-04 20:32:01.761785337 +0000 UTC))"
I0504 20:32:01.761813       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:35 +0000 UTC to 2036-05-01 20:22:35 +0000 UTC (now=2026-05-04 20:32:01.761801751 +0000 UTC))"
I0504 20:32:01.761840       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:37 +0000 UTC to 2036-05-01 20:22:37 +0000 UTC (now=2026-05-04 20:32:01.761827216 +0000 UTC))"
I0504 20:32:01.761859       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:41 +0000 UTC to 2036-05-01 20:22:41 +0000 UTC (now=2026-05-04 20:32:01.76185075 +0000 UTC))"
I0504 20:32:01.761881       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3b1be7abd6lftrkdcr3bri040ctaq4-kx-6d24bc8bbe_customer-system-admin-signer@1777926273\" [] issuer=\"<self>\" (2026-05-04 20:24:33 +0000 UTC to 2026-05-11 20:24:34 +0000 UTC (now=2026-05-04 20:32:01.761865397 +0000 UTC))"
I0504 20:32:01.761900       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3b1be7abd6lftrkdcr3bri040ctaq4-kx-6d24bc8bbe_sre-system-admin-signer@1777926273\" [] issuer=\"<self>\" (2026-05-04 20:24:32 +0000 UTC to 2026-05-11 20:24:33 +0000 UTC (now=2026-05-04 20:32:01.761890544 +0000 UTC))"
I0504 20:32:01.761915       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-05-04 20:22:26 +0000 UTC to 2036-05-01 20:22:26 +0000 UTC (now=2026-05-04 20:32:01.761907654 +0000 UTC))"
I0504 20:32:01.762069       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1654936039/tls.crt::/tmp/serving-cert-1654936039/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777926720\" (2026-05-04 20:32:00 +0000 UTC to 2026-05-04 20:32:01 +0000 UTC (now=2026-05-04 20:32:01.762060135 +0000 UTC))"
I0504 20:32:01.762236       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777926721\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777926721\" (2026-05-04 19:32:01 +0000 UTC to 2027-05-04 19:32:01 +0000 UTC (now=2026-05-04 20:32:01.762226689 +0000 UTC))"
I0504 20:32:01.781045       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0504 20:32:01.781062       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0504 20:32:01.781071       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0504 20:32:01.781068       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0504 20:32:01.781085       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0504 20:32:01.781076       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0504 20:32:01.781095       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0504 20:32:01.781091       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0504 20:32:01.781103       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0504 20:32:01.781101       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0504 20:32:01.781107       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0504 20:32:01.781109       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0504 20:32:01.781114       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0504 20:32:01.781110       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0504 20:32:01.781142       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0504 20:32:01.781145       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0504 20:32:01.781148       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0504 20:32:01.781147       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0504 20:32:01.781152       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0504 20:32:01.835260       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.881211       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0504 20:32:01.881226       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0504 20:32:01.881227       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0504 20:32:01.881233       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0504 20:32:01.881237       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0504 20:32:01.881238       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0504 20:32:01.881248       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0504 20:32:01.881253       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0504 20:32:01.881257       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0504 20:32:01.881240       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0504 20:32:01.881272       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0504 20:32:01.881261       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0504 20:32:01.921793       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:01.980318       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0504 20:32:01.980336       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0504 20:32:01.980344       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0504 20:32:01.980348       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0504 20:32:01.980351       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0504 20:32:01.980354       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0504 20:32:01.980380       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:01.980399       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:01.980417       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:01.980447       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0504 20:32:01.980457       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:01.980469       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0504 20:32:01.980480       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0504 20:32:01.980485       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0504 20:32:01.980490       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0504 20:32:01.980485       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:01.980495       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0504 20:32:01.996616       1 configmap.go:109] updating configmap open-cluster-management-2q3b1be7abd6lftrkdcr3bri040ctaq4/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.009807       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.009864       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.010018       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.010089       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.026616       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0504 20:32:02.035490       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.035533       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.035674       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.035687       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.053584       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0504 20:32:02.080502       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0504 20:32:02.080522       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0504 20:32:02.080530       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0504 20:32:02.080537       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0504 20:32:02.080542       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0504 20:32:02.080547       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0504 20:32:02.080579       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0504 20:32:02.080582       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0504 20:32:02.201610       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.392681       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.592331       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.811413       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:02.993323       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:03.192413       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:03.392735       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:03.592575       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:03.791901       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:04.020750       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:04.198258       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:04.392561       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:04.591971       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:04.794815       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:04.993105       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:05.192991       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:05.393197       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:05.593478       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:05.792776       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:05.993546       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:06.193061       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
W0504 20:32:06.295481       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0504 20:32:06.393496       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:06.592646       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:06.794384       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:06.992621       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0504 20:32:07.197612       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:07.393110       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:07.592282       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:07.792905       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:07.993073       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:08.192435       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:08.393345       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:08.593797       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:08.792945       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0504 20:32:08.993989       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:09.191734       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:09.391929       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:09.592477       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:09.792726       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0504 20:32:09.994270       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:10.191070       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0504 20:32:10.393973       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:10.593353       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:10.790976       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:10.991779       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:11.193602       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:11.394493       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:11.592675       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:11.794072       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:11.992984       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:12.196327       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:12.393112       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:12.594675       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:12.794060       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:12.993358       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:13.193813       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:13.393908       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:13.592421       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:13.794435       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:13.993830       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:14.198014       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:14.393905       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:14.594249       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:14.793615       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:14.995410       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:15.194527       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:15.393828       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:15.593150       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:15.793910       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:15.991991       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:16.196512       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0504 20:32:25.374580       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0504 20:32:25.396683       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0504 20:32:27.863859       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0504 20:32:29.625560       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0504 20:32:29.628145       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0504 20:33:04.727013       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0504 20:36:13.066017       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0504 20:41:31.007237       1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.102511       1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.127474       1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.138665       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.152482       1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.161279       1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.172549       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.185138       1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle
I0504 20:41:35.193936       1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0504 20:42:05.107487       1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle
I0504 20:42:24.333284       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0504 20:42:31.363717       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0504 20:42:35.042632       1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.138050       1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.239645       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.341277       1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.437445       1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.537455       1 configmap.go:109] updating configmap open-cluster-management-2q3b1be7abd6lftrkdcr3bri040ctaq4/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.648792       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.741446       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0504 20:42:35.889371       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0504 20:42:36.028315       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0504 20:42:36.505314       1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle
I0504 20:42:37.037756       1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle
I0504 20:42:37.200994       1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle
I0504 20:42:37.247770       1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle
I0504 20:42:37.539429       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0504 20:46:32.057412       1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.080859       1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.091467       1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.112674       1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.459543       1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.635482       1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.726578       1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:32.809895       1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:33.249047       1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:33.377740       1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle
I0504 20:46:37.020467       1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle
I0504 20:46:37.203484       1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle
I0504 20:46:37.351312       1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle
I0504 20:46:37.535357       1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle
I0504 20:46:37.713417       1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle
I0504 20:46:37.896170       1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle
I0504 20:46:37.997255       1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle
I0504 20:46:38.136878       1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle
I0504 20:46:40.035615       1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle
I0504 20:46:40.121629       1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle
I0504 20:48:32.152881       1 configmap.go:109] updating configmap managed-tenant-ju16v/openshift-service-ca.crt with the service signing CA bundle
I0504 20:48:33.404350       1 configmap.go:109] updating configmap managed-tenant-ju16v/config-service-cabundle with the service signing CA bundle
W0504 20:52:02.054946       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"