W0417 10:45:52.340594       1 cmd.go:257] Using insecure, self-signed certificates
I0417 10:45:52.340819       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776422752 cert, and key in /tmp/serving-cert-1925029752/serving-signer.crt, /tmp/serving-cert-1925029752/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1776422752" is unset, resetting to 157680000000000000 years!
I0417 10:45:52.963555       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0417 10:45:52.963897       1 observer_polling.go:159] Starting file observer
I0417 10:45:52.963977       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0417 10:45:52.963992       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0417 10:45:52.963997       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0417 10:45:52.964001       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0417 10:45:52.989501       1 builder.go:304] service-ca-controller version -
I0417 10:45:52.990137       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1925029752/tls.crt::/tmp/serving-cert-1925029752/tls.key"
I0417 10:45:53.401495       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0417 10:45:53.406470       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0417 10:45:53.406485       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0417 10:45:53.406504       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0417 10:45:53.406509       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0417 10:45:53.410696       1 secure_serving.go:57] Forcing use of http/1.1 only
W0417 10:45:53.410714       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
I0417 10:45:53.410713       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0417 10:45:53.410719       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0417 10:45:53.410730       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0417 10:45:53.410733       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0417 10:45:53.410735       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0417 10:45:53.410738       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0417 10:45:53.414628       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0417 10:45:53.414655       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0417 10:45:53.414661       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0417 10:45:53.414669       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0417 10:45:53.414663       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0417 10:45:53.414658       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0417 10:45:53.414737       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0417 10:45:53.414887       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1925029752/tls.crt::/tmp/serving-cert-1925029752/tls.key"
I0417 10:45:53.415013       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1925029752/tls.crt::/tmp/serving-cert-1925029752/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776422752\" (2026-04-17 10:45:51 +0000 UTC to 2026-04-17 10:45:52 +0000 UTC (now=2026-04-17 10:45:53.414990216 +0000 UTC))"
I0417 10:45:53.415177       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776422753\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776422753\" (2026-04-17 09:45:52 +0000 UTC to 2027-04-17 09:45:52 +0000 UTC (now=2026-04-17 10:45:53.415162227 +0000 UTC))"
I0417 10:45:53.415194       1 secure_serving.go:213] Serving securely on [::]:8443
I0417 10:45:53.415210       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0417 10:45:53.415212       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0417 10:45:53.417357       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.417365       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.417417       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.424146       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0417 10:45:53.424207       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"8fba7fd8-717e-4aab-9b10-e1351ea7a613", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9805", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-b989b_393f61ed-2dd7-4968-92d5-aae2ee2370d0 became leader
I0417 10:45:53.425128       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0417 10:45:53.425131       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0417 10:45:53.425128       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0417 10:45:53.425147       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0417 10:45:53.425157       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0417 10:45:53.425233       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0417 10:45:53.425530       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0417 10:45:53.425751       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0417 10:45:53.425791       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0417 10:45:53.429526       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.430932       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.432064       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.432351       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.510589       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.514891       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0417 10:45:53.514896       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0417 10:45:53.514975       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0417 10:45:53.515092       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:06 +0000 UTC to 2036-04-14 10:36:06 +0000 UTC (now=2026-04-17 10:45:53.515061775 +0000 UTC))"
I0417 10:45:53.515310       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1925029752/tls.crt::/tmp/serving-cert-1925029752/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776422752\" (2026-04-17 10:45:51 +0000 UTC to 2026-04-17 10:45:52 +0000 UTC (now=2026-04-17 10:45:53.515297057 +0000 UTC))"
I0417 10:45:53.515468       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776422753\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776422753\" (2026-04-17 09:45:52 +0000 UTC to 2027-04-17 09:45:52 +0000 UTC (now=2026-04-17 10:45:53.515456237 +0000 UTC))"
I0417 10:45:53.515591       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:09 +0000 UTC to 2036-04-14 10:36:09 +0000 UTC (now=2026-04-17 10:45:53.515580058 +0000 UTC))"
I0417 10:45:53.515610       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:11 +0000 UTC to 2036-04-14 10:36:11 +0000 UTC (now=2026-04-17 10:45:53.515601883 +0000 UTC))"
I0417 10:45:53.515625       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:17 +0000 UTC to 2036-04-14 10:36:17 +0000 UTC (now=2026-04-17 10:45:53.515617731 +0000 UTC))"
I0417 10:45:53.515647       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:18 +0000 UTC to 2036-04-14 10:36:18 +0000 UTC (now=2026-04-17 10:45:53.515632683 +0000 UTC))"
I0417 10:45:53.515662       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:21 +0000 UTC to 2036-04-14 10:36:21 +0000 UTC (now=2026-04-17 10:45:53.515655299 +0000 UTC))"
I0417 10:45:53.515678       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pnrrjv6mqrotcoibmog3bg4e9rn57cs-kx-dbb307d9d7_customer-system-admin-signer@1776422290\" [] issuer=\"<self>\" (2026-04-17 10:38:09 +0000 UTC to 2026-04-24 10:38:10 +0000 UTC (now=2026-04-17 10:45:53.515669277 +0000 UTC))"
I0417 10:45:53.515697       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pnrrjv6mqrotcoibmog3bg4e9rn57cs-kx-dbb307d9d7_sre-system-admin-signer@1776422290\" [] issuer=\"<self>\" (2026-04-17 10:38:10 +0000 UTC to 2026-04-24 10:38:11 +0000 UTC (now=2026-04-17 10:45:53.515687973 +0000 UTC))"
I0417 10:45:53.515711       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-17 10:36:06 +0000 UTC to 2036-04-14 10:36:06 +0000 UTC (now=2026-04-17 10:45:53.515703952 +0000 UTC))"
I0417 10:45:53.515901       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1925029752/tls.crt::/tmp/serving-cert-1925029752/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776422752\" (2026-04-17 10:45:51 +0000 UTC to 2026-04-17 10:45:52 +0000 UTC (now=2026-04-17 10:45:53.515890365 +0000 UTC))"
I0417 10:45:53.516057       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776422753\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776422753\" (2026-04-17 09:45:52 +0000 UTC to 2027-04-17 09:45:52 +0000 UTC (now=2026-04-17 10:45:53.516043546 +0000 UTC))"
I0417 10:45:53.525236       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0417 10:45:53.525249       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0417 10:45:53.525255       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0417 10:45:53.525258       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0417 10:45:53.525260       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0417 10:45:53.525269       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0417 10:45:53.525274       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0417 10:45:53.525277       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0417 10:45:53.525281       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0417 10:45:53.525284       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0417 10:45:53.525302       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0417 10:45:53.525262       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0417 10:45:53.525316       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0417 10:45:53.525325       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0417 10:45:53.525335       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0417 10:45:53.525340       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0417 10:45:53.525343       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0417 10:45:53.525347       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0417 10:45:53.525350       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0417 10:45:53.526131       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0417 10:45:53.526139       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0417 10:45:53.526144       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0417 10:45:53.526147       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0417 10:45:53.526150       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0417 10:45:53.526146       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0417 10:45:53.526165       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0417 10:45:53.526171       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0417 10:45:53.526175       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0417 10:45:53.526178       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0417 10:45:53.526155       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0417 10:45:53.526181       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0417 10:45:53.564887       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.625157       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0417 10:45:53.625175       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0417 10:45:53.625186       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0417 10:45:53.625190       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0417 10:45:53.625193       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0417 10:45:53.625196       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0417 10:45:53.625218       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.625227       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.625227       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.625242       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.625254       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.625263       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0417 10:45:53.625289       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0417 10:45:53.625299       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0417 10:45:53.625304       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0417 10:45:53.625309       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0417 10:45:53.625314       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0417 10:45:53.639042       1 configmap.go:109] updating configmap open-cluster-management-2pnrrjv6mqrotcoibmog3bg4e9rn57cs/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.646254       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.648191       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.648241       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.651160       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.660416       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0417 10:45:53.664853       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.667392       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.667421       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.667509       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:53.735122       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0417 10:45:53.825535       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0417 10:45:53.825554       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0417 10:45:53.825561       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0417 10:45:53.825565       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0417 10:45:53.825569       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0417 10:45:53.825572       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0417 10:45:53.825606       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0417 10:45:53.825625       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0417 10:45:53.836362       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:54.037441       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:54.236377       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:54.438721       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:54.637258       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:54.850106       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:55.038440       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:55.235872       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:55.436454       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:55.637402       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:55.835806       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:56.037185       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:56.233700       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:56.437691       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:56.637395       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:56.838175       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:57.035652       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:57.237601       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:57.435949       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:57.637058       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:57.835159       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
W0417 10:45:58.037452       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0417 10:45:58.037700       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:58.237057       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:58.437443       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:58.637667       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0417 10:45:58.837149       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:59.035693       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:59.235678       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:59.436721       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:59.636234       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0417 10:45:59.837400       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:00.038216       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:00.236955       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:00.437095       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0417 10:46:00.637194       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:00.836104       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:01.036777       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:01.237364       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:01.437433       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0417 10:46:01.636566       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:01.835506       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0417 10:46:02.038250       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:02.237735       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:02.435463       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:02.636139       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:02.837509       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:03.035607       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:03.236726       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:03.438031       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:03.637629       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:03.836558       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:04.036740       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:04.237846       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:04.435701       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:04.645078       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:04.834892       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:05.034484       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:05.235630       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:05.436619       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:05.634797       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:05.836710       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:06.035613       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:06.236082       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:06.435565       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:06.634201       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:06.833582       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:07.036582       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:07.234105       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:07.436004       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:07.636247       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:07.834542       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0417 10:46:15.013066       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0417 10:46:21.145813       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0417 10:46:21.159517       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0417 10:46:25.327997       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0417 10:46:25.342145       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0417 10:46:56.378892       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0417 10:47:57.600945       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0417 10:51:06.569312       1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.584449       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.598900       1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.619556       1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.630782       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.647632       1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.660256       1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.667445       1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:10.678571       1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:36.075071       1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle
I0417 10:51:56.891293       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0417 10:52:02.259414       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0417 10:52:05.933478       1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.031639       1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.130413       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.230442       1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.332947       1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.433103       1 configmap.go:109] updating configmap open-cluster-management-2pnrrjv6mqrotcoibmog3bg4e9rn57cs/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.530250       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.637504       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.730441       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.830997       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0417 10:52:06.934727       1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle
I0417 10:52:07.029984       1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle
I0417 10:52:07.130478       1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle
I0417 10:52:07.231769       1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle
I0417 10:52:07.349650       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0417 10:55:54.656515       1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:54.669897       1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:54.686327       1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:54.689560       1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:55.144052       1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:55.663786       1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:55.960130       1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:56.107333       1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:56.261455       1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle
I0417 10:55:57.104550       1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle
I0417 10:55:57.150072       1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle
I0417 10:55:57.219441       1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle
I0417 10:55:57.298500       1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle
I0417 10:55:59.436219       1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle
I0417 10:55:59.536900       1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle
I0417 10:55:59.638246       1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle
I0417 10:55:59.734776       1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle
I0417 10:55:59.837033       1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle
I0417 10:57:53.581720       1 configmap.go:109] updating configmap default-managed-tenant-izslr/openshift-service-ca.crt with the service signing CA bundle
I0417 10:57:54.782093       1 configmap.go:109] updating configmap default-managed-tenant-izslr/config-service-cabundle with the service signing CA bundle
W0417 11:05:53.736422       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"