W0505 08:22:52.447506 1 cmd.go:257] Using insecure, self-signed certificates I0505 08:22:52.447717 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777969372 cert, and key in /tmp/serving-cert-2326658223/serving-signer.crt, /tmp/serving-cert-2326658223/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777969372" is unset, resetting to 157680000000000000 years! I0505 08:22:53.080519 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0505 08:22:53.080911 1 observer_polling.go:159] Starting file observer I0505 08:22:53.080993 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0505 08:22:53.081008 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0505 08:22:53.081013 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0505 08:22:53.081017 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0505 08:22:53.117562 1 builder.go:304] service-ca-controller version - I0505 08:22:53.118311 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2326658223/tls.crt::/tmp/serving-cert-2326658223/tls.key" I0505 08:22:53.566774 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0505 08:22:53.576497 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0505 08:22:53.576515 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0505 08:22:53.576536 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0505 08:22:53.576540 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0505 08:22:53.579757 1 secure_serving.go:57] Forcing use of http/1.1 only I0505 08:22:53.579758 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0505 08:22:53.579791 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0505 08:22:53.579797 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0505 08:22:53.579802 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0505 08:22:53.579807 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0505 08:22:53.579812 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0505 08:22:53.579816 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0505 08:22:53.584326 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0505 08:22:53.584366 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 08:22:53.584340 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0505 08:22:53.584375 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0505 08:22:53.584395 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 08:22:53.584391 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0505 08:22:53.584706 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2326658223/tls.crt::/tmp/serving-cert-2326658223/tls.key" I0505 08:22:53.584899 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2326658223/tls.crt::/tmp/serving-cert-2326658223/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777969372\" (2026-05-05 08:22:52 +0000 UTC to 2026-05-05 08:22:53 +0000 UTC (now=2026-05-05 08:22:53.584867278 +0000 UTC))" I0505 08:22:53.585101 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777969373\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777969373\" (2026-05-05 07:22:53 +0000 UTC to 2027-05-05 07:22:53 +0000 UTC (now=2026-05-05 08:22:53.585082086 +0000 UTC))" I0505 08:22:53.585131 1 secure_serving.go:213] Serving securely on [::]:8443 I0505 08:22:53.585216 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0505 08:22:53.585216 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0505 08:22:53.585587 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0505 08:22:53.587479 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.587677 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.587689 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.596677 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0505 08:22:53.596831 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"c2e0a789-9a32-422f-95e3-44c6fb2cadba", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10438", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-v5k8c_2757b3d3-20f4-414d-8eac-23ff60d8e0c1 became leader I0505 08:22:53.598061 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0505 08:22:53.598089 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0505 08:22:53.598095 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0505 08:22:53.598115 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0505 08:22:53.598120 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0505 08:22:53.598263 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0505 08:22:53.599390 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0505 08:22:53.599719 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0505 08:22:53.599756 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0505 08:22:53.600680 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.601723 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.605717 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.606912 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.650228 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.684660 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0505 08:22:53.684697 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 08:22:53.684674 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 08:22:53.686295 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 08:11:14 +0000 UTC to 2036-05-02 08:11:14 +0000 UTC (now=2026-05-05 08:22:53.686231927 +0000 UTC))" I0505 08:22:53.686631 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2326658223/tls.crt::/tmp/serving-cert-2326658223/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777969372\" (2026-05-05 08:22:52 +0000 UTC to 2026-05-05 08:22:53 +0000 UTC (now=2026-05-05 08:22:53.686608236 +0000 UTC))" I0505 08:22:53.686981 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777969373\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777969373\" (2026-05-05 07:22:53 +0000 UTC to 2027-05-05 07:22:53 +0000 UTC (now=2026-05-05 08:22:53.686959023 +0000 UTC))" I0505 08:22:53.687534 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-05 08:11:15 +0000 UTC to 2036-05-02 08:11:15 +0000 UTC (now=2026-05-05 08:22:53.687509369 +0000 UTC))" I0505 08:22:53.687561 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-05 08:11:19 +0000 UTC to 2036-05-02 08:11:19 +0000 UTC (now=2026-05-05 08:22:53.687551755 +0000 UTC))" I0505 08:22:53.687578 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-05 08:11:25 +0000 UTC to 2036-05-02 08:11:25 +0000 UTC (now=2026-05-05 08:22:53.687568592 +0000 UTC))" I0505 08:22:53.687594 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-05 08:11:26 +0000 UTC to 2036-05-02 08:11:26 +0000 UTC (now=2026-05-05 08:22:53.687584825 +0000 UTC))" I0505 08:22:53.687609 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-05 08:11:28 +0000 UTC to 2036-05-02 08:11:28 +0000 UTC (now=2026-05-05 08:22:53.687601173 +0000 UTC))" I0505 08:22:53.687627 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3ldim9a28b4bs5p55oas8jpfchqces-kx-99c9d17dd1_customer-system-admin-signer@1777968798\" [] issuer=\"\" (2026-05-05 08:13:18 +0000 UTC to 2026-05-12 08:13:19 +0000 UTC (now=2026-05-05 08:22:53.687615805 +0000 UTC))" I0505 08:22:53.687647 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3ldim9a28b4bs5p55oas8jpfchqces-kx-99c9d17dd1_sre-system-admin-signer@1777968798\" [] issuer=\"\" (2026-05-05 08:13:19 +0000 UTC to 2026-05-12 08:13:20 +0000 UTC (now=2026-05-05 08:22:53.687637755 +0000 UTC))" I0505 08:22:53.687675 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 08:11:14 +0000 UTC to 2036-05-02 08:11:14 +0000 UTC (now=2026-05-05 08:22:53.687667399 +0000 UTC))" I0505 08:22:53.687862 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2326658223/tls.crt::/tmp/serving-cert-2326658223/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777969372\" (2026-05-05 08:22:52 +0000 UTC to 2026-05-05 08:22:53 +0000 UTC (now=2026-05-05 08:22:53.687851768 +0000 UTC))" I0505 08:22:53.688050 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777969373\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777969373\" (2026-05-05 07:22:53 +0000 UTC to 2027-05-05 07:22:53 +0000 UTC (now=2026-05-05 08:22:53.688039595 +0000 UTC))" I0505 08:22:53.692795 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.698304 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0505 08:22:53.698310 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0505 08:22:53.698316 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 08:22:53.698321 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0505 08:22:53.698324 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 08:22:53.698328 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 08:22:53.698331 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 08:22:53.698334 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 08:22:53.698328 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0505 08:22:53.698354 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0505 08:22:53.698320 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0505 08:22:53.698361 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0505 08:22:53.698366 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0505 08:22:53.698368 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.698386 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.698412 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.698433 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.698451 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0505 08:22:53.698487 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0505 08:22:53.698498 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0505 08:22:53.698504 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0505 08:22:53.698509 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0505 08:22:53.698514 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0505 08:22:53.698515 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0505 08:22:53.698353 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.698540 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0505 08:22:53.698551 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0505 08:22:53.698560 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0505 08:22:53.698582 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0505 08:22:53.698587 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0505 08:22:53.698590 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0505 08:22:53.698384 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0505 08:22:53.698622 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0505 08:22:53.698628 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0505 08:22:53.698634 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0505 08:22:53.698639 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0505 08:22:53.699964 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0505 08:22:53.699974 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0505 08:22:53.699979 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0505 08:22:53.699982 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0505 08:22:53.699985 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0505 08:22:53.699987 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0505 08:22:53.700020 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0505 08:22:53.700027 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0505 08:22:53.700030 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0505 08:22:53.700033 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0505 08:22:53.700035 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0505 08:22:53.700038 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0505 08:22:53.709397 1 configmap.go:109] updating configmap open-cluster-management-2q3ldim9a28b4bs5p55oas8jpfchqces/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.712518 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.715868 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.716642 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.717699 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.720399 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0505 08:22:53.728524 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.731171 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.732002 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:53.774447 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 08:22:53.798689 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0505 08:22:53.798719 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0505 08:22:53.798729 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0505 08:22:53.798735 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0505 08:22:53.798739 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0505 08:22:53.798744 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0505 08:22:53.798788 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0505 08:22:53.798788 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0505 08:22:53.809019 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:54.008728 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:54.229068 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:54.416418 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:54.621988 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:54.810267 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:55.008089 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:55.207785 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:55.410491 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:55.620147 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:55.814231 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:56.014578 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:56.208667 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:56.411990 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:56.609906 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:56.812618 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:57.009280 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:57.211925 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:57.409554 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:57.608611 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:57.809852 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:58.009205 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle W0505 08:22:58.009942 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0505 08:22:58.208395 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:58.409096 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:58.607497 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:58.811400 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0505 08:22:59.008809 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:59.209950 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:59.409121 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:59.609850 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:22:59.809513 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:00.008306 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:00.209395 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:00.411787 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:00.609736 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0505 08:23:00.809267 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:01.010711 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:01.211235 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:01.411997 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:01.611241 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0505 08:23:01.809655 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:02.009061 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0505 08:23:02.209375 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:02.410323 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:02.609986 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:02.808690 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:03.009747 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:03.210335 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:03.413039 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:03.611583 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:03.809521 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:04.009720 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:04.208593 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:04.409520 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:04.609240 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:04.812773 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:05.011765 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:05.206814 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:05.407325 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:05.608637 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:05.809415 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:06.006596 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:06.206782 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:06.408158 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:06.615017 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:06.813811 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:07.009945 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:07.221450 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:07.409000 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:07.610760 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:07.807682 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:08.008510 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0505 08:23:19.866319 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0505 08:23:22.022206 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0505 08:23:22.033357 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0505 08:23:28.190699 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0505 08:23:28.197969 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0505 08:23:58.236859 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0505 08:27:04.790437 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0505 08:31:04.245857 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.185187 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.205613 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.232568 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.258852 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.279162 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.291201 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.318087 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:08.335178 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:29.694067 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0505 08:31:59.550570 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0505 08:32:06.278361 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0505 08:32:09.973109 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0505 08:32:10.073447 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0505 08:32:10.173707 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0505 08:32:10.276630 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0505 08:32:10.373072 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0505 08:32:10.478647 1 configmap.go:109] updating configmap open-cluster-management-2q3ldim9a28b4bs5p55oas8jpfchqces/config-service-cabundle with the service signing CA bundle I0505 08:32:10.573324 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0505 08:32:10.678178 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0505 08:32:10.773261 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0505 08:32:10.874880 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0505 08:32:10.976436 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0505 08:32:11.072204 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0505 08:32:11.176392 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0505 08:32:11.274137 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0505 08:32:11.857890 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W0505 08:42:53.776425 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0505 08:55:19.508792 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:19.515105 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:19.531014 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:19.538327 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:19.943633 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:20.267615 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:20.324212 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:20.502921 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:21.330927 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:21.474279 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0505 08:55:26.083593 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0505 08:55:26.162642 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0505 08:55:26.225327 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0505 08:55:26.319520 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0505 08:55:26.416194 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0505 08:55:26.523083 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0505 08:55:26.680352 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0505 08:55:26.776311 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0505 08:55:26.874698 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0505 08:55:26.978377 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle