W0505 13:04:14.540696 1 cmd.go:257] Using insecure, self-signed certificates I0505 13:04:14.540914 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777986254 cert, and key in /tmp/serving-cert-2889293180/serving-signer.crt, /tmp/serving-cert-2889293180/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777986254" is unset, resetting to 157680000000000000 years! I0505 13:04:15.333510 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0505 13:04:15.333831 1 observer_polling.go:159] Starting file observer I0505 13:04:15.333901 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0505 13:04:15.333914 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0505 13:04:15.333919 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0505 13:04:15.333923 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0505 13:04:15.357612 1 builder.go:304] service-ca-controller version - I0505 13:04:15.358262 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2889293180/tls.crt::/tmp/serving-cert-2889293180/tls.key" I0505 13:04:15.945528 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0505 13:04:15.950736 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0505 13:04:15.950752 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0505 13:04:15.950772 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0505 13:04:15.950777 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0505 13:04:15.953948 1 secure_serving.go:57] Forcing use of http/1.1 only I0505 13:04:15.953959 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0505 13:04:15.953967 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0505 13:04:15.953971 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0505 13:04:15.953975 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0505 13:04:15.953978 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0505 13:04:15.953980 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0505 13:04:15.953982 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0505 13:04:15.958335 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0505 13:04:15.958364 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0505 13:04:15.958387 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0505 13:04:15.958409 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 13:04:15.958485 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0505 13:04:15.958605 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 13:04:15.958715 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2889293180/tls.crt::/tmp/serving-cert-2889293180/tls.key" I0505 13:04:15.958830 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2889293180/tls.crt::/tmp/serving-cert-2889293180/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777986254\" (2026-05-05 13:04:14 +0000 UTC to 2026-05-05 13:04:15 +0000 UTC (now=2026-05-05 13:04:15.958801443 +0000 UTC))" I0505 13:04:15.959036 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777986255\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777986255\" (2026-05-05 12:04:15 +0000 UTC to 2027-05-05 12:04:15 +0000 UTC (now=2026-05-05 13:04:15.959017755 +0000 UTC))" I0505 13:04:15.959057 1 secure_serving.go:213] Serving securely on [::]:8443 I0505 13:04:15.959075 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0505 13:04:15.959092 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0505 13:04:15.959428 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0505 13:04:15.961831 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:15.961892 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:15.962000 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:15.971542 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0505 13:04:15.971593 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"8498976f-3de4-4c1c-9d8d-a47587e4081b", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9164", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-8nl2g_87b23848-10f5-4db3-b410-899917a71787 became leader I0505 13:04:15.974266 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0505 13:04:15.974267 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0505 13:04:15.974276 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0505 13:04:15.974271 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0505 13:04:15.974297 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0505 13:04:15.974311 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0505 13:04:15.974760 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0505 13:04:15.975058 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0505 13:04:15.975084 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0505 13:04:15.981285 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:15.981318 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:15.982968 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:15.983285 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:16.032355 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:16.058411 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0505 13:04:16.058470 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0505 13:04:16.058644 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 12:54:51 +0000 UTC to 2036-05-02 12:54:51 +0000 UTC (now=2026-05-05 13:04:16.058617877 +0000 UTC))" I0505 13:04:16.058864 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2889293180/tls.crt::/tmp/serving-cert-2889293180/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777986254\" (2026-05-05 13:04:14 +0000 UTC to 2026-05-05 13:04:15 +0000 UTC (now=2026-05-05 13:04:16.058851518 +0000 UTC))" I0505 13:04:16.059034 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777986255\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777986255\" (2026-05-05 12:04:15 +0000 UTC to 2027-05-05 12:04:15 +0000 UTC (now=2026-05-05 13:04:16.059022235 +0000 UTC))" I0505 13:04:16.059057 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0505 13:04:16.059439 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-05 12:54:55 +0000 UTC to 2036-05-02 12:54:55 +0000 UTC (now=2026-05-05 13:04:16.059413443 +0000 UTC))" I0505 13:04:16.059471 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-05 12:54:59 +0000 UTC to 2036-05-02 12:54:59 +0000 UTC (now=2026-05-05 13:04:16.059456191 +0000 UTC))" I0505 13:04:16.059499 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-05 12:55:01 +0000 UTC to 2036-05-02 12:55:01 +0000 UTC (now=2026-05-05 13:04:16.059484524 +0000 UTC))" I0505 13:04:16.059526 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-05 12:55:06 +0000 UTC to 2036-05-02 12:55:06 +0000 UTC (now=2026-05-05 13:04:16.05951296 +0000 UTC))" I0505 13:04:16.059552 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-05 12:55:09 +0000 UTC to 2036-05-02 12:55:09 +0000 UTC (now=2026-05-05 13:04:16.059539102 +0000 UTC))" I0505 13:04:16.059597 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3pgomrf7usgk184opr5h51gb38bj10-kx-d1512bc1d8_customer-system-admin-signer@1777985819\" [] issuer=\"\" (2026-05-05 12:56:59 +0000 UTC to 2026-05-12 12:57:00 +0000 UTC (now=2026-05-05 13:04:16.059564952 +0000 UTC))" I0505 13:04:16.059628 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3pgomrf7usgk184opr5h51gb38bj10-kx-d1512bc1d8_sre-system-admin-signer@1777985819\" [] issuer=\"\" (2026-05-05 12:56:59 +0000 UTC to 2026-05-12 12:57:00 +0000 UTC (now=2026-05-05 13:04:16.059612291 +0000 UTC))" I0505 13:04:16.059689 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-05 12:54:51 +0000 UTC to 2036-05-02 12:54:51 +0000 UTC (now=2026-05-05 13:04:16.059674553 +0000 UTC))" I0505 13:04:16.059936 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2889293180/tls.crt::/tmp/serving-cert-2889293180/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777986254\" (2026-05-05 13:04:14 +0000 UTC to 2026-05-05 13:04:15 +0000 UTC (now=2026-05-05 13:04:16.059918278 +0000 UTC))" I0505 13:04:16.060161 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777986255\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777986255\" (2026-05-05 12:04:15 +0000 UTC to 2027-05-05 12:04:15 +0000 UTC (now=2026-05-05 13:04:16.060143989 +0000 UTC))" I0505 13:04:16.074352 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0505 13:04:16.074373 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0505 13:04:16.074371 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0505 13:04:16.074384 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0505 13:04:16.074388 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0505 13:04:16.074389 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0505 13:04:16.074394 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0505 13:04:16.074396 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0505 13:04:16.074398 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0505 13:04:16.074401 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0505 13:04:16.074405 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0505 13:04:16.074408 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0505 13:04:16.074397 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0505 13:04:16.074426 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0505 13:04:16.074431 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0505 13:04:16.074435 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0505 13:04:16.074440 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0505 13:04:16.074443 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0505 13:04:16.074434 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0505 13:04:16.074692 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:16.075126 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0505 13:04:16.075134 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0505 13:04:16.075139 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0505 13:04:16.075143 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0505 13:04:16.075145 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0505 13:04:16.075148 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0505 13:04:16.075150 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0505 13:04:16.075152 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0505 13:04:16.075155 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0505 13:04:16.075161 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0505 13:04:16.075155 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0505 13:04:16.075269 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0505 13:04:16.136911 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0505 13:04:16.174669 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0505 13:04:16.174690 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0505 13:04:16.174696 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0505 13:04:16.174703 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0505 13:04:16.174707 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0505 13:04:16.174711 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0505 13:04:16.174711 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0505 13:04:16.174716 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0505 13:04:16.174717 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0505 13:04:16.174719 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0505 13:04:16.174722 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0505 13:04:16.174727 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0505 13:04:16.174752 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0505 13:04:16.174760 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.174649 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector W0505 13:04:16.174777 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0505 13:04:16.174817 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.174817 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 13:04:16.174833 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 13:04:16.174837 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.174789 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.174856 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.174839 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 13:04:16.174940 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 13:04:16.174946 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0505 13:04:16.186112 1 configmap.go:109] updating configmap open-cluster-management-2q3pgomrf7usgk184opr5h51gb38bj10/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.189242 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.190267 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.190271 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.196160 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.198674 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0505 13:04:16.205857 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.207738 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.207832 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.211810 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.386003 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.594393 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.786900 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:16.989192 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:17.185771 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:17.387696 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:17.586811 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:17.785159 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:17.985122 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:18.186188 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:18.385469 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:18.586184 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:18.787277 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:18.987151 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:19.185713 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:19.386156 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:19.586811 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:19.784652 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:19.987961 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:20.187570 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:20.385764 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle W0505 13:04:20.390477 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0505 13:04:20.586961 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:20.787014 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:20.986647 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:21.185049 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0505 13:04:21.387737 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:21.589652 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:21.788115 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:22.000243 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:22.193277 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:22.387692 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:22.585805 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:22.787853 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:22.988184 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0505 13:04:23.187352 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:23.387483 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:23.587008 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:23.786247 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:23.987484 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0505 13:04:24.187692 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:24.388007 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0505 13:04:24.586559 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:24.787355 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:24.987572 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:25.187148 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:25.390001 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:25.586816 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:25.785746 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:25.986798 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:26.187384 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:26.386877 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:26.587168 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:26.785045 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:26.986615 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:27.185750 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:27.386140 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:27.586263 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:27.786313 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:27.984064 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:28.185811 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:28.385688 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:28.586381 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:28.786615 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:28.985396 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:29.185343 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:29.388718 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:29.584870 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:29.784655 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:29.985525 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:30.216171 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:30.388035 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0505 13:04:36.911946 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0505 13:04:36.922207 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0505 13:04:39.458751 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0505 13:04:40.068286 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0505 13:04:40.080931 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0505 13:05:15.043707 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0505 13:08:27.140229 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0505 13:11:05.795354 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.827287 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.836111 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.849209 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.864238 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.874134 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.888710 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.897980 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:09.906616 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0505 13:11:35.869432 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0505 13:12:03.912298 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0505 13:12:08.730411 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0505 13:12:12.425241 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0505 13:12:12.527037 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0505 13:12:12.624719 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0505 13:12:12.730573 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0505 13:12:12.829605 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0505 13:12:12.932613 1 configmap.go:109] updating configmap open-cluster-management-2q3pgomrf7usgk184opr5h51gb38bj10/config-service-cabundle with the service signing CA bundle I0505 13:12:13.027313 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0505 13:12:13.127157 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0505 13:12:13.227038 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0505 13:12:13.327507 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0505 13:12:13.426592 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0505 13:12:13.525963 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0505 13:12:13.626987 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0505 13:12:13.726070 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0505 13:12:13.874064 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0505 13:17:25.456040 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:25.485262 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:25.493367 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:25.503055 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:26.236321 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:26.489137 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:26.538393 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:26.639682 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:27.242677 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:27.844095 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0505 13:17:29.991349 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0505 13:17:30.060799 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0505 13:17:30.174222 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0505 13:17:30.238420 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0505 13:17:30.313699 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0505 13:17:30.378822 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0505 13:17:30.485603 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0505 13:17:30.582179 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0505 13:17:30.667028 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0505 13:17:30.742163 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0505 13:20:24.283540 1 configmap.go:109] updating configmap managed-tenant-64lm5/openshift-service-ca.crt with the service signing CA bundle I0505 13:20:25.541142 1 configmap.go:109] updating configmap managed-tenant-64lm5/config-service-cabundle with the service signing CA bundle W0505 13:24:16.137829 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"