W0512 11:36:21.753645 1 cmd.go:257] Using insecure, self-signed certificates I0512 11:36:21.753857 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778585781 cert, and key in /tmp/serving-cert-983405775/serving-signer.crt, /tmp/serving-cert-983405775/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1778585781" is unset, resetting to 157680000000000000 years! I0512 11:36:22.116221 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0512 11:36:22.116540 1 observer_polling.go:159] Starting file observer I0512 11:36:22.116615 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0512 11:36:22.116631 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0512 11:36:22.116637 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0512 11:36:22.116641 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0512 11:36:22.143672 1 builder.go:304] service-ca-controller version - I0512 11:36:22.144314 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-983405775/tls.crt::/tmp/serving-cert-983405775/tls.key" I0512 11:36:22.725019 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0512 11:36:22.733505 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0512 11:36:22.733520 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0512 11:36:22.733538 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0512 11:36:22.733545 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0512 11:36:22.736538 1 secure_serving.go:57] Forcing use of http/1.1 only W0512 11:36:22.736555 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. I0512 11:36:22.736553 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0512 11:36:22.736559 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0512 11:36:22.736576 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0512 11:36:22.736579 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0512 11:36:22.736582 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0512 11:36:22.736584 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0512 11:36:22.743300 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0512 11:36:22.743305 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0512 11:36:22.743327 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0512 11:36:22.743336 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0512 11:36:22.743338 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0512 11:36:22.743343 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0512 11:36:22.743658 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-983405775/tls.crt::/tmp/serving-cert-983405775/tls.key" I0512 11:36:22.743825 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-983405775/tls.crt::/tmp/serving-cert-983405775/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778585781\" (2026-05-12 11:36:21 +0000 UTC to 2026-05-12 11:36:22 +0000 UTC (now=2026-05-12 11:36:22.743796146 +0000 UTC))" I0512 11:36:22.743992 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778585782\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778585782\" (2026-05-12 10:36:22 +0000 UTC to 2027-05-12 10:36:22 +0000 UTC (now=2026-05-12 11:36:22.74397802 +0000 UTC))" I0512 11:36:22.744010 1 secure_serving.go:213] Serving securely on [::]:8443 I0512 11:36:22.744025 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0512 11:36:22.744037 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0512 11:36:22.744219 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0512 11:36:22.746826 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.746881 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.746957 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.757795 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0512 11:36:22.757858 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"205d3e9e-e5ce-47bc-94b8-9acfd507f4b5", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10647", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-dlf9g_88c85d1c-e6fa-4d17-854c-9895697c396f became leader I0512 11:36:22.758762 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0512 11:36:22.758782 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0512 11:36:22.758793 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0512 11:36:22.758802 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0512 11:36:22.758890 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0512 11:36:22.759440 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0512 11:36:22.760088 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0512 11:36:22.760838 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0512 11:36:22.760542 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0512 11:36:22.774678 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.774832 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.778131 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.779106 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.843793 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0512 11:36:22.843882 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0512 11:36:22.843885 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0512 11:36:22.844062 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-12 11:24:57 +0000 UTC to 2036-05-09 11:24:57 +0000 UTC (now=2026-05-12 11:36:22.844038343 +0000 UTC))" I0512 11:36:22.844294 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-983405775/tls.crt::/tmp/serving-cert-983405775/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778585781\" (2026-05-12 11:36:21 +0000 UTC to 2026-05-12 11:36:22 +0000 UTC (now=2026-05-12 11:36:22.844275226 +0000 UTC))" I0512 11:36:22.844467 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778585782\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778585782\" (2026-05-12 10:36:22 +0000 UTC to 2027-05-12 10:36:22 +0000 UTC (now=2026-05-12 11:36:22.844455532 +0000 UTC))" I0512 11:36:22.844598 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-12 11:25:00 +0000 UTC to 2036-05-09 11:25:00 +0000 UTC (now=2026-05-12 11:36:22.844585308 +0000 UTC))" I0512 11:36:22.844630 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-12 11:25:03 +0000 UTC to 2036-05-09 11:25:03 +0000 UTC (now=2026-05-12 11:36:22.844614264 +0000 UTC))" I0512 11:36:22.844650 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-12 11:25:06 +0000 UTC to 2036-05-09 11:25:06 +0000 UTC (now=2026-05-12 11:36:22.844640842 +0000 UTC))" I0512 11:36:22.844665 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-12 11:25:07 +0000 UTC to 2036-05-09 11:25:07 +0000 UTC (now=2026-05-12 11:36:22.844657255 +0000 UTC))" I0512 11:36:22.844683 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-12 11:25:09 +0000 UTC to 2036-05-09 11:25:09 +0000 UTC (now=2026-05-12 11:36:22.844671814 +0000 UTC))" I0512 11:36:22.844707 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q8btjnpc38stnn9s3vkf9fec7sthl4r-kx-3e0031faf4_customer-system-admin-signer@1778585199\" [] issuer=\"\" (2026-05-12 11:26:39 +0000 UTC to 2026-05-19 11:26:40 +0000 UTC (now=2026-05-12 11:36:22.844696644 +0000 UTC))" I0512 11:36:22.844727 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q8btjnpc38stnn9s3vkf9fec7sthl4r-kx-3e0031faf4_sre-system-admin-signer@1778585199\" [] issuer=\"\" (2026-05-12 11:26:42 +0000 UTC to 2026-05-19 11:26:43 +0000 UTC (now=2026-05-12 11:36:22.844717585 +0000 UTC))" I0512 11:36:22.844742 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-12 11:24:57 +0000 UTC to 2036-05-09 11:24:57 +0000 UTC (now=2026-05-12 11:36:22.844734975 +0000 UTC))" I0512 11:36:22.844923 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-983405775/tls.crt::/tmp/serving-cert-983405775/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778585781\" (2026-05-12 11:36:21 +0000 UTC to 2026-05-12 11:36:22 +0000 UTC (now=2026-05-12 11:36:22.844911961 +0000 UTC))" I0512 11:36:22.845093 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778585782\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778585782\" (2026-05-12 10:36:22 +0000 UTC to 2027-05-12 10:36:22 +0000 UTC (now=2026-05-12 11:36:22.845078577 +0000 UTC))" I0512 11:36:22.850385 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.859134 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0512 11:36:22.859144 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0512 11:36:22.859156 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:36:22.859149 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0512 11:36:22.859171 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0512 11:36:22.859178 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0512 11:36:22.859182 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0512 11:36:22.859198 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0512 11:36:22.859200 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0512 11:36:22.859163 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:36:22.859216 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:36:22.859220 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:36:22.859223 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0512 11:36:22.860383 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0512 11:36:22.860395 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0512 11:36:22.860400 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0512 11:36:22.860404 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0512 11:36:22.860407 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0512 11:36:22.860410 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0512 11:36:22.861084 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0512 11:36:22.861096 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0512 11:36:22.861104 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0512 11:36:22.861109 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0512 11:36:22.861113 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0512 11:36:22.861117 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0512 11:36:22.861157 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0512 11:36:22.861166 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0512 11:36:22.861177 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0512 11:36:22.861183 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0512 11:36:22.861205 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0512 11:36:22.861210 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0512 11:36:22.923241 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:22.959856 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0512 11:36:22.959875 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0512 11:36:22.959882 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0512 11:36:22.959879 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0512 11:36:22.959892 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:36:22.959898 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:36:22.959902 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:36:22.959906 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:36:22.959906 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.959909 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0512 11:36:22.959886 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0512 11:36:22.959928 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0512 11:36:22.959931 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0512 11:36:22.959947 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.959985 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.959994 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.960017 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.974942 1 configmap.go:109] updating configmap open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.987893 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.988140 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.988205 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.990709 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:22.990753 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0512 11:36:23.004327 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.008023 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.013552 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.015404 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.029998 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0512 11:36:23.059161 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0512 11:36:23.059178 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0512 11:36:23.059195 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0512 11:36:23.059201 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0512 11:36:23.059205 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0512 11:36:23.059207 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0512 11:36:23.059228 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0512 11:36:23.059244 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0512 11:36:23.209599 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.397136 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.587823 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.776986 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:23.974079 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:24.175628 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:24.373708 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:24.576936 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:24.773486 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:24.971274 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:25.174283 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:25.381534 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:25.574321 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:25.771324 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:25.972726 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:26.174684 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:26.373311 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:26.574871 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:26.775876 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:26.972210 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:27.176807 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:27.371091 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle W0512 11:36:27.373248 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0512 11:36:27.572980 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:27.774058 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:27.971730 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:28.173855 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0512 11:36:28.374025 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:28.573254 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:28.775946 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:28.972272 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:29.175819 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:29.372266 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:29.572472 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:29.772695 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:29.972343 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0512 11:36:30.172486 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:30.373148 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:30.572716 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:30.772707 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:30.973464 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0512 11:36:31.171386 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:31.371941 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0512 11:36:31.572324 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:31.772081 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:31.972124 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:32.173263 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:32.382043 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:32.571754 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:32.773799 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:32.974691 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:33.171889 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:33.373560 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:33.571997 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:33.770648 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:33.973008 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:34.171967 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:34.370955 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:34.589938 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:34.777579 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:34.972550 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:35.172220 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:35.371010 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:35.572378 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:35.770802 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:35.972945 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:36.172524 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:36.370492 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:36.572758 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:36.771982 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:36.970913 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:37.171934 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:37.372600 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0512 11:36:50.671567 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0512 11:36:50.686759 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0512 11:36:55.866341 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0512 11:36:55.870314 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0512 11:37:15.328844 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0512 11:37:26.990909 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0512 11:38:24.348278 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0512 11:40:58.455333 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:02.963914 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:02.973690 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:02.985608 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:03.005542 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:03.020403 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:03.035375 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:03.053330 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:03.079145 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:35.975099 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:47.778665 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0512 11:41:56.344122 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0512 11:42:00.631661 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0512 11:42:00.695325 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0512 11:42:00.791903 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0512 11:42:00.892811 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0512 11:42:00.994431 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0512 11:42:01.093813 1 configmap.go:109] updating configmap open-cluster-management-2q8btjnpc38stnn9s3vkf9fec7sthl4r/config-service-cabundle with the service signing CA bundle I0512 11:42:01.193800 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0512 11:42:01.295491 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0512 11:42:01.392974 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0512 11:42:01.494720 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0512 11:42:01.597309 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0512 11:42:01.693344 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0512 11:42:01.793326 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0512 11:42:01.894052 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0512 11:42:02.185368 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0512 11:46:03.514786 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:03.532074 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:03.549712 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:03.558083 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:03.818827 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:04.614130 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:04.906776 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:05.172741 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:05.641476 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:05.702112 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0512 11:46:10.203771 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0512 11:46:10.308672 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0512 11:46:10.380707 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0512 11:46:10.436504 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0512 11:46:10.493772 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0512 11:46:10.593622 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0512 11:46:10.692997 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0512 11:46:12.561237 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0512 11:46:12.632372 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0512 11:46:12.736274 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0512 11:48:07.944320 1 configmap.go:109] updating configmap managed-tenant-6103z/openshift-service-ca.crt with the service signing CA bundle I0512 11:48:09.188118 1 configmap.go:109] updating configmap managed-tenant-6103z/config-service-cabundle with the service signing CA bundle W0512 11:56:23.030650 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0512 12:16:23.031936 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"