W0428 15:40:14.974896 1 cmd.go:257] Using insecure, self-signed certificates I0428 15:40:14.975074 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777390814 cert, and key in /tmp/serving-cert-3198976278/serving-signer.crt, /tmp/serving-cert-3198976278/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777390814" is unset, resetting to 157680000000000000 years! I0428 15:40:15.227549 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0428 15:40:15.227873 1 observer_polling.go:159] Starting file observer I0428 15:40:15.227933 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0428 15:40:15.227945 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0428 15:40:15.227950 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0428 15:40:15.227953 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0428 15:40:15.259527 1 builder.go:304] service-ca-controller version - I0428 15:40:15.260193 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3198976278/tls.crt::/tmp/serving-cert-3198976278/tls.key" I0428 15:40:16.368882 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0428 15:40:16.377616 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0428 15:40:16.377633 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0428 15:40:16.377651 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0428 15:40:16.377656 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0428 15:40:16.380762 1 secure_serving.go:57] Forcing use of http/1.1 only I0428 15:40:16.380774 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0428 15:40:16.380780 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0428 15:40:16.380784 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0428 15:40:16.380788 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0428 15:40:16.380791 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0428 15:40:16.380794 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0428 15:40:16.380796 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0428 15:40:16.386924 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0428 15:40:16.386954 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0428 15:40:16.387002 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0428 15:40:16.387006 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0428 15:40:16.387022 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 15:40:16.387015 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 15:40:16.387226 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3198976278/tls.crt::/tmp/serving-cert-3198976278/tls.key" I0428 15:40:16.387312 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3198976278/tls.crt::/tmp/serving-cert-3198976278/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777390814\" (2026-04-28 15:40:14 +0000 UTC to 2026-04-28 15:40:15 +0000 UTC (now=2026-04-28 15:40:16.38726992 +0000 UTC))" I0428 15:40:16.387503 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777390816\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777390815\" (2026-04-28 14:40:15 +0000 UTC to 2027-04-28 14:40:15 +0000 UTC (now=2026-04-28 15:40:16.387486774 +0000 UTC))" I0428 15:40:16.387522 1 secure_serving.go:213] Serving securely on [::]:8443 I0428 15:40:16.387549 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0428 15:40:16.387563 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0428 15:40:16.388561 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0428 15:40:16.391033 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.391838 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.392136 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.403072 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0428 15:40:16.403121 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"f368d0dc-493e-4d48-b018-6528e0456f70", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10263", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-qpmnv_e4822815-711f-4107-b847-b73977cef43d became leader I0428 15:40:16.404505 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0428 15:40:16.404523 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0428 15:40:16.404520 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0428 15:40:16.404529 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0428 15:40:16.404560 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0428 15:40:16.404606 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0428 15:40:16.405005 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0428 15:40:16.405908 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0428 15:40:16.406294 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0428 15:40:16.409536 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.411354 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.411590 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.414138 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.458825 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.487241 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 15:40:16.487256 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 15:40:16.487332 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0428 15:40:16.487448 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 15:28:23 +0000 UTC to 2036-04-25 15:28:23 +0000 UTC (now=2026-04-28 15:40:16.487418927 +0000 UTC))" I0428 15:40:16.487663 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3198976278/tls.crt::/tmp/serving-cert-3198976278/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777390814\" (2026-04-28 15:40:14 +0000 UTC to 2026-04-28 15:40:15 +0000 UTC (now=2026-04-28 15:40:16.487649007 +0000 UTC))" I0428 15:40:16.487851 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777390816\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777390815\" (2026-04-28 14:40:15 +0000 UTC to 2027-04-28 14:40:15 +0000 UTC (now=2026-04-28 15:40:16.48783657 +0000 UTC))" I0428 15:40:16.487987 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-28 15:28:24 +0000 UTC to 2036-04-25 15:28:24 +0000 UTC (now=2026-04-28 15:40:16.487975282 +0000 UTC))" I0428 15:40:16.488020 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-28 15:28:27 +0000 UTC to 2036-04-25 15:28:27 +0000 UTC (now=2026-04-28 15:40:16.488002802 +0000 UTC))" I0428 15:40:16.488038 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 15:28:31 +0000 UTC to 2036-04-25 15:28:31 +0000 UTC (now=2026-04-28 15:40:16.488030065 +0000 UTC))" I0428 15:40:16.488054 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-28 15:28:35 +0000 UTC to 2036-04-25 15:28:35 +0000 UTC (now=2026-04-28 15:40:16.488046359 +0000 UTC))" I0428 15:40:16.488069 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-28 15:28:37 +0000 UTC to 2036-04-25 15:28:37 +0000 UTC (now=2026-04-28 15:40:16.488062279 +0000 UTC))" I0428 15:40:16.488094 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pv84p6sed3utucq8k8srs7b6fppqucb-kx-076eb0c26c_customer-system-admin-signer@1777390232\" [] issuer=\"\" (2026-04-28 15:30:31 +0000 UTC to 2026-05-05 15:30:32 +0000 UTC (now=2026-04-28 15:40:16.488079944 +0000 UTC))" I0428 15:40:16.488114 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pv84p6sed3utucq8k8srs7b6fppqucb-kx-076eb0c26c_sre-system-admin-signer@1777390232\" [] issuer=\"\" (2026-04-28 15:30:32 +0000 UTC to 2026-05-05 15:30:33 +0000 UTC (now=2026-04-28 15:40:16.488105457 +0000 UTC))" I0428 15:40:16.488129 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 15:28:23 +0000 UTC to 2036-04-25 15:28:23 +0000 UTC (now=2026-04-28 15:40:16.488121839 +0000 UTC))" I0428 15:40:16.488314 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3198976278/tls.crt::/tmp/serving-cert-3198976278/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777390814\" (2026-04-28 15:40:14 +0000 UTC to 2026-04-28 15:40:15 +0000 UTC (now=2026-04-28 15:40:16.488303582 +0000 UTC))" I0428 15:40:16.488485 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777390816\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777390815\" (2026-04-28 14:40:15 +0000 UTC to 2027-04-28 14:40:15 +0000 UTC (now=2026-04-28 15:40:16.488473339 +0000 UTC))" I0428 15:40:16.504556 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0428 15:40:16.504571 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0428 15:40:16.504577 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0428 15:40:16.504582 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0428 15:40:16.504576 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0428 15:40:16.504592 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0428 15:40:16.504598 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0428 15:40:16.504602 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0428 15:40:16.504605 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0428 15:40:16.504609 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0428 15:40:16.504585 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0428 15:40:16.504619 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0428 15:40:16.504636 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0428 15:40:16.504640 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:40:16.504643 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:40:16.504646 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:40:16.504649 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:40:16.504652 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:40:16.504672 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0428 15:40:16.506011 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0428 15:40:16.506020 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0428 15:40:16.506024 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0428 15:40:16.506027 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0428 15:40:16.506030 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0428 15:40:16.506033 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0428 15:40:16.506667 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0428 15:40:16.506678 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0428 15:40:16.506682 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0428 15:40:16.506686 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0428 15:40:16.506690 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0428 15:40:16.506694 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0428 15:40:16.526127 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.604625 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0428 15:40:16.604643 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0428 15:40:16.604650 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0428 15:40:16.604655 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:40:16.604658 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0428 15:40:16.604663 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:40:16.604671 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:40:16.604675 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:40:16.604679 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:40:16.604685 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.604663 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0428 15:40:16.604717 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0428 15:40:16.604722 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0428 15:40:16.604736 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.604741 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.604739 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.604767 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.627583 1 configmap.go:109] updating configmap open-cluster-management-2pv84p6sed3utucq8k8srs7b6fppqucb/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.627640 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.627954 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.630067 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.630081 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.642837 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0428 15:40:16.646873 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.653361 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.653391 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.653575 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:16.727460 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:40:16.805315 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0428 15:40:16.805336 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0428 15:40:16.805342 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0428 15:40:16.805346 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0428 15:40:16.805350 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0428 15:40:16.805355 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0428 15:40:16.805387 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0428 15:40:16.805395 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0428 15:40:16.818876 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:17.017662 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:17.215679 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:17.433987 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:17.616883 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:17.818046 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:18.014884 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:18.215975 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:18.416142 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:18.621244 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:18.816441 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:19.021746 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:19.217515 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:19.419981 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:19.616108 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:19.816324 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:20.017529 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:20.216304 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:20.416842 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:20.615662 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0428 15:40:20.623107 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0428 15:40:20.815037 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:21.015170 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:21.219567 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:21.419736 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:21.615046 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0428 15:40:21.816982 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:22.016335 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:22.216927 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:22.417403 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:22.616071 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:22.818419 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:23.014833 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:23.219746 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:23.419478 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0428 15:40:23.619242 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:23.821087 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:24.015591 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:24.216692 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:24.417687 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0428 15:40:24.620956 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:24.816100 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0428 15:40:25.016366 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:25.217647 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:25.420104 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:25.619868 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:25.817658 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:26.018609 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:26.215742 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:26.417484 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:26.616607 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:26.818264 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:27.016821 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:27.217563 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:27.415373 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:27.618491 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:27.815844 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:28.016840 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:28.215612 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:28.416543 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:28.618004 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:28.817080 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:29.017490 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:29.215908 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:29.416945 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:29.617512 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:29.816598 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:30.015668 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:30.217307 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:30.415413 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:30.618650 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:30.816641 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0428 15:40:43.761424 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0428 15:40:43.771716 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0428 15:40:48.932387 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0428 15:40:48.946490 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0428 15:41:09.671657 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0428 15:41:18.957750 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0428 15:44:36.053440 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0428 15:51:10.789469 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:14.948851 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:14.961199 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:14.993580 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:15.013366 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:15.034975 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:15.065018 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:15.092595 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:15.115200 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0428 15:51:47.515384 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:52:04.378082 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0428 15:52:23.948214 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0428 15:52:27.615336 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0428 15:52:27.709329 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0428 15:52:27.810142 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0428 15:52:27.914060 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0428 15:52:28.008829 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0428 15:52:28.107929 1 configmap.go:109] updating configmap open-cluster-management-2pv84p6sed3utucq8k8srs7b6fppqucb/config-service-cabundle with the service signing CA bundle I0428 15:52:28.215313 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0428 15:52:28.313112 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0428 15:52:28.417092 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0428 15:52:28.511077 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0428 15:52:28.611015 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0428 15:52:28.709016 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0428 15:52:28.807022 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0428 15:52:28.907997 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0428 15:52:29.047263 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0428 15:55:19.233031 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:19.247097 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:19.264226 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:19.279135 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:19.760341 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:20.072068 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:20.262355 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:20.424237 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:20.857982 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:20.970255 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0428 15:55:25.813734 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0428 15:55:25.870515 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0428 15:55:25.957347 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0428 15:55:26.027086 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0428 15:55:26.115513 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0428 15:55:26.211080 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0428 15:55:26.308546 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0428 15:55:26.411256 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0428 15:55:26.511225 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0428 15:55:26.617156 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0428 15:57:23.960676 1 configmap.go:109] updating configmap managed-tenant-w1qok/openshift-service-ca.crt with the service signing CA bundle I0428 15:57:25.217935 1 configmap.go:109] updating configmap managed-tenant-w1qok/config-service-cabundle with the service signing CA bundle W0428 16:00:16.728855 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"