W0327 15:07:06.822219 1 cmd.go:257] Using insecure, self-signed certificates I0327 15:07:06.822438 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1774624026 cert, and key in /tmp/serving-cert-1920826512/serving-signer.crt, /tmp/serving-cert-1920826512/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1774624026" is unset, resetting to 157680000000000000 years! I0327 15:07:07.117489 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0327 15:07:07.117802 1 observer_polling.go:159] Starting file observer I0327 15:07:07.117863 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0327 15:07:07.117879 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0327 15:07:07.117885 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0327 15:07:07.117890 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0327 15:07:07.141908 1 builder.go:304] service-ca-controller version - I0327 15:07:07.142621 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1920826512/tls.crt::/tmp/serving-cert-1920826512/tls.key" I0327 15:07:07.556305 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0327 15:07:07.560941 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0327 15:07:07.560957 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0327 15:07:07.560978 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0327 15:07:07.560985 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0327 15:07:07.564049 1 secure_serving.go:57] Forcing use of http/1.1 only I0327 15:07:07.564059 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0327 15:07:07.564070 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0327 15:07:07.564078 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0327 15:07:07.564085 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0327 15:07:07.564088 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0327 15:07:07.564090 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0327 15:07:07.564093 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0327 15:07:07.568542 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0327 15:07:07.568565 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0327 15:07:07.568576 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0327 15:07:07.568583 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0327 15:07:07.568592 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0327 15:07:07.568613 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0327 15:07:07.568636 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0327 15:07:07.568938 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1920826512/tls.crt::/tmp/serving-cert-1920826512/tls.key" I0327 15:07:07.569074 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1920826512/tls.crt::/tmp/serving-cert-1920826512/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774624026\" (2026-03-27 15:07:06 +0000 UTC to 2026-03-27 15:07:07 +0000 UTC (now=2026-03-27 15:07:07.569028091 +0000 UTC))" I0327 15:07:07.569315 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774624027\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774624027\" (2026-03-27 14:07:07 +0000 UTC to 2027-03-27 14:07:07 +0000 UTC (now=2026-03-27 15:07:07.569293317 +0000 UTC))" I0327 15:07:07.569343 1 secure_serving.go:213] Serving securely on [::]:8443 I0327 15:07:07.569648 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0327 15:07:07.569964 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0327 15:07:07.571806 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.572103 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.572223 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.578441 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0327 15:07:07.578490 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"0de893bb-7d4b-4473-bace-bc0cb0f22e5e", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10859", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-f59fc589b-d6587_171a4c91-c4a0-4028-9c86-2d615976b713 became leader I0327 15:07:07.579558 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0327 15:07:07.579591 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0327 15:07:07.579598 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0327 15:07:07.579608 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0327 15:07:07.579620 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0327 15:07:07.579711 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0327 15:07:07.580034 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0327 15:07:07.580251 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0327 15:07:07.580303 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0327 15:07:07.582544 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.583699 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.584612 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.586311 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.630900 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.668625 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0327 15:07:07.668644 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0327 15:07:07.668625 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0327 15:07:07.670088 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-03-27 14:53:35 +0000 UTC to 2036-03-24 14:53:35 +0000 UTC (now=2026-03-27 15:07:07.670051166 +0000 UTC))" I0327 15:07:07.670124 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-03-27 14:53:42 +0000 UTC to 2036-03-24 14:53:42 +0000 UTC (now=2026-03-27 15:07:07.670109018 +0000 UTC))" I0327 15:07:07.670148 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-03-27 14:53:46 +0000 UTC to 2036-03-24 14:53:46 +0000 UTC (now=2026-03-27 15:07:07.670134801 +0000 UTC))" I0327 15:07:07.670173 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-03-27 14:53:47 +0000 UTC to 2036-03-24 14:53:47 +0000 UTC (now=2026-03-27 15:07:07.670160736 +0000 UTC))" I0327 15:07:07.670197 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-03-27 14:53:50 +0000 UTC to 2036-03-24 14:53:50 +0000 UTC (now=2026-03-27 15:07:07.670183821 +0000 UTC))" I0327 15:07:07.670226 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pa4l1bb6ehlhnjl9imbt50cosjbq69n-kx-c3e8d4b4b8_customer-system-admin-signer@1774623335\" [] issuer=\"\" (2026-03-27 14:55:35 +0000 UTC to 2026-04-03 14:55:36 +0000 UTC (now=2026-03-27 15:07:07.670209192 +0000 UTC))" I0327 15:07:07.670263 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pa4l1bb6ehlhnjl9imbt50cosjbq69n-kx-c3e8d4b4b8_sre-system-admin-signer@1774623335\" [] issuer=\"\" (2026-03-27 14:55:35 +0000 UTC to 2026-04-03 14:55:36 +0000 UTC (now=2026-03-27 15:07:07.670243547 +0000 UTC))" I0327 15:07:07.670296 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-03-27 14:53:33 +0000 UTC to 2036-03-24 14:53:33 +0000 UTC (now=2026-03-27 15:07:07.670279325 +0000 UTC))" I0327 15:07:07.670530 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1920826512/tls.crt::/tmp/serving-cert-1920826512/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1774624026\" (2026-03-27 15:07:06 +0000 UTC to 2026-03-27 15:07:07 +0000 UTC (now=2026-03-27 15:07:07.67050715 +0000 UTC))" I0327 15:07:07.670737 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1774624027\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1774624027\" (2026-03-27 14:07:07 +0000 UTC to 2027-03-27 14:07:07 +0000 UTC (now=2026-03-27 15:07:07.670722173 +0000 UTC))" I0327 15:07:07.672409 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.679629 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0327 15:07:07.679637 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0327 15:07:07.679644 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0327 15:07:07.679651 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0327 15:07:07.679653 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0327 15:07:07.679660 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0327 15:07:07.679680 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0327 15:07:07.679678 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0327 15:07:07.679692 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0327 15:07:07.679660 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0327 15:07:07.679653 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0327 15:07:07.679706 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0327 15:07:07.679706 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.679712 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0327 15:07:07.679717 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0327 15:07:07.679718 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0327 15:07:07.679733 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.679731 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.679788 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.679802 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0327 15:07:07.679815 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0327 15:07:07.679824 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0327 15:07:07.679830 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0327 15:07:07.679837 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0327 15:07:07.679841 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0327 15:07:07.679707 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0327 15:07:07.679872 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0327 15:07:07.679880 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0327 15:07:07.679883 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0327 15:07:07.679886 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0327 15:07:07.679698 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0327 15:07:07.679686 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0327 15:07:07.679789 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.679900 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0327 15:07:07.679917 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0327 15:07:07.679923 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0327 15:07:07.680284 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0327 15:07:07.680293 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0327 15:07:07.680297 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0327 15:07:07.680300 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0327 15:07:07.680303 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0327 15:07:07.680306 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0327 15:07:07.680321 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0327 15:07:07.680325 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0327 15:07:07.680328 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0327 15:07:07.680332 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0327 15:07:07.680335 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0327 15:07:07.680338 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0327 15:07:07.692194 1 configmap.go:109] updating configmap open-cluster-management-2pa4l1bb6ehlhnjl9imbt50cosjbq69n/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.693917 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.693937 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.694341 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.695419 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.706784 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0327 15:07:07.706885 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.708719 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.709009 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.748822 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0327 15:07:07.780586 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0327 15:07:07.780607 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0327 15:07:07.780614 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0327 15:07:07.780618 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0327 15:07:07.780621 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0327 15:07:07.780626 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0327 15:07:07.780656 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0327 15:07:07.780699 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0327 15:07:07.789227 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:07.989539 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:08.194206 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:08.389578 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:08.593878 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:08.789658 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:08.991270 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:09.191140 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:09.391877 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:09.592019 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:09.791099 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:09.991528 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:10.190882 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:10.392225 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:10.589871 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:10.792484 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:10.991737 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:11.192939 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:11.391432 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:11.590803 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:11.791360 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0327 15:07:11.795367 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0327 15:07:11.990130 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:12.191187 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:12.391694 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:12.590363 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:12.789617 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0327 15:07:12.992362 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:13.191683 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:13.391945 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:13.592883 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:13.791550 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:13.990197 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:14.190638 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:14.391209 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:14.590213 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0327 15:07:14.790595 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:14.991763 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:15.194108 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:15.391721 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:15.590735 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0327 15:07:15.789917 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:15.990519 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0327 15:07:16.191714 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:16.390040 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:16.591396 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:16.791217 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:16.991294 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:17.190773 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:17.395817 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:17.592168 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:17.792113 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:17.989473 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:18.190382 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:18.392936 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:18.592353 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:18.788328 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:18.990378 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:19.189246 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:19.390480 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:19.587912 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:19.790918 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:19.994220 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:20.189839 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:20.389589 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:20.589821 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:20.789016 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:21.008042 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:21.188873 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:21.390612 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:21.589104 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:21.790993 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:21.991785 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0327 15:07:36.912736 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0327 15:07:38.066684 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0327 15:07:38.084728 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0327 15:07:43.261619 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0327 15:07:43.261681 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0327 15:08:15.489423 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0327 15:11:30.418802 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0327 15:16:36.878612 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.401979 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.412596 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.427602 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.461592 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.474604 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.479529 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.490765 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0327 15:16:40.504997 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0327 15:17:21.099054 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0327 15:17:45.926642 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0327 15:17:50.770873 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0327 15:17:54.477342 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0327 15:17:54.571560 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0327 15:17:54.673023 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0327 15:17:54.772045 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0327 15:17:54.871645 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0327 15:17:54.971574 1 configmap.go:109] updating configmap open-cluster-management-2pa4l1bb6ehlhnjl9imbt50cosjbq69n/config-service-cabundle with the service signing CA bundle I0327 15:17:55.076871 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0327 15:17:55.171574 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0327 15:17:55.271803 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0327 15:17:55.378141 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0327 15:17:55.471488 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0327 15:17:55.571292 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0327 15:17:55.676444 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0327 15:17:55.772341 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0327 15:17:55.898240 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0327 15:23:03.644099 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:03.657715 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:03.684337 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:04.111917 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:04.415847 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:04.600656 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:04.848985 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:04.955101 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:04.970760 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0327 15:23:07.550485 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0327 15:23:07.701861 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0327 15:23:07.796235 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0327 15:23:07.897265 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0327 15:23:08.026664 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0327 15:23:08.160789 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0327 15:23:09.942927 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0327 15:23:10.040028 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0327 15:23:10.137743 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle W0327 15:27:07.750037 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"