W0521 19:34:45.771235 1 cmd.go:257] Using insecure, self-signed certificates I0521 19:34:45.771389 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1779392085 cert, and key in /tmp/serving-cert-605826707/serving-signer.crt, /tmp/serving-cert-605826707/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1779392085" is unset, resetting to 157680000000000000 years! I0521 19:34:45.858679 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0521 19:34:45.859024 1 observer_polling.go:159] Starting file observer I0521 19:34:45.859147 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0521 19:34:45.859164 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0521 19:34:45.859168 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0521 19:34:45.859173 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0521 19:34:45.886301 1 builder.go:304] service-ca-controller version - I0521 19:34:45.886935 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-605826707/tls.crt::/tmp/serving-cert-605826707/tls.key" I0521 19:34:46.409784 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0521 19:34:46.415002 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0521 19:34:46.415016 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0521 19:34:46.415036 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0521 19:34:46.415043 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0521 19:34:46.418176 1 secure_serving.go:57] Forcing use of http/1.1 only I0521 19:34:46.418186 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0521 19:34:46.418194 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0521 19:34:46.418198 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0521 19:34:46.418202 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0521 19:34:46.418204 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0521 19:34:46.418207 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0521 19:34:46.418209 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0521 19:34:46.423181 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0521 19:34:46.423217 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0521 19:34:46.423254 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0521 19:34:46.423274 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0521 19:34:46.423425 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0521 19:34:46.423521 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0521 19:34:46.423713 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-605826707/tls.crt::/tmp/serving-cert-605826707/tls.key" I0521 19:34:46.423909 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-605826707/tls.crt::/tmp/serving-cert-605826707/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1779392085\" (2026-05-21 19:34:44 +0000 UTC to 2026-05-21 19:34:45 +0000 UTC (now=2026-05-21 19:34:46.423842274 +0000 UTC))" I0521 19:34:46.424143 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1779392086\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1779392086\" (2026-05-21 18:34:45 +0000 UTC to 2027-05-21 18:34:45 +0000 UTC (now=2026-05-21 19:34:46.424126657 +0000 UTC))" I0521 19:34:46.424175 1 secure_serving.go:213] Serving securely on [::]:8443 I0521 19:34:46.424365 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0521 19:34:46.424376 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0521 19:34:46.424516 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0521 19:34:46.426257 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.426256 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.427211 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.436675 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0521 19:34:46.436724 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"1971cc1e-6d09-4b56-9687-2e3d4ec7930c", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9788", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-c8pwz_d1185489-6eb8-44a2-8b69-ad87fb7eb42a became leader I0521 19:34:46.437992 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0521 19:34:46.437996 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0521 19:34:46.438001 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0521 19:34:46.438021 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0521 19:34:46.438054 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0521 19:34:46.438112 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0521 19:34:46.438419 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0521 19:34:46.438849 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0521 19:34:46.438920 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0521 19:34:46.441488 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.442171 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.443650 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.446585 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.499140 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.523842 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0521 19:34:46.523853 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0521 19:34:46.523886 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0521 19:34:46.524020 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-21 19:24:49 +0000 UTC to 2036-05-18 19:24:49 +0000 UTC (now=2026-05-21 19:34:46.523984049 +0000 UTC))" I0521 19:34:46.524216 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-605826707/tls.crt::/tmp/serving-cert-605826707/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1779392085\" (2026-05-21 19:34:44 +0000 UTC to 2026-05-21 19:34:45 +0000 UTC (now=2026-05-21 19:34:46.524203227 +0000 UTC))" I0521 19:34:46.524371 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1779392086\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1779392086\" (2026-05-21 18:34:45 +0000 UTC to 2027-05-21 18:34:45 +0000 UTC (now=2026-05-21 19:34:46.524360176 +0000 UTC))" I0521 19:34:46.524522 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-21 19:24:52 +0000 UTC to 2036-05-18 19:24:52 +0000 UTC (now=2026-05-21 19:34:46.524510881 +0000 UTC))" I0521 19:34:46.524549 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-21 19:24:57 +0000 UTC to 2036-05-18 19:24:57 +0000 UTC (now=2026-05-21 19:34:46.52453388 +0000 UTC))" I0521 19:34:46.524566 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-21 19:25:00 +0000 UTC to 2036-05-18 19:25:00 +0000 UTC (now=2026-05-21 19:34:46.524558153 +0000 UTC))" I0521 19:34:46.524582 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-21 19:25:02 +0000 UTC to 2036-05-18 19:25:02 +0000 UTC (now=2026-05-21 19:34:46.524574802 +0000 UTC))" I0521 19:34:46.524615 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-21 19:25:05 +0000 UTC to 2036-05-18 19:25:05 +0000 UTC (now=2026-05-21 19:34:46.524606803 +0000 UTC))" I0521 19:34:46.524631 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2qegodliprq74gho7aoi2isiraqmm012-kx-2576126ae3_customer-system-admin-signer@1779391628\" [] issuer=\"\" (2026-05-21 19:27:08 +0000 UTC to 2026-05-28 19:27:09 +0000 UTC (now=2026-05-21 19:34:46.524621972 +0000 UTC))" I0521 19:34:46.524649 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2qegodliprq74gho7aoi2isiraqmm012-kx-2576126ae3_sre-system-admin-signer@1779391628\" [] issuer=\"\" (2026-05-21 19:27:09 +0000 UTC to 2026-05-28 19:27:10 +0000 UTC (now=2026-05-21 19:34:46.524639265 +0000 UTC))" I0521 19:34:46.524673 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-21 19:24:49 +0000 UTC to 2036-05-18 19:24:49 +0000 UTC (now=2026-05-21 19:34:46.524656024 +0000 UTC))" I0521 19:34:46.524841 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-605826707/tls.crt::/tmp/serving-cert-605826707/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1779392085\" (2026-05-21 19:34:44 +0000 UTC to 2026-05-21 19:34:45 +0000 UTC (now=2026-05-21 19:34:46.524822875 +0000 UTC))" I0521 19:34:46.525005 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1779392086\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1779392086\" (2026-05-21 18:34:45 +0000 UTC to 2027-05-21 18:34:45 +0000 UTC (now=2026-05-21 19:34:46.524995767 +0000 UTC))" I0521 19:34:46.535182 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.538839 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0521 19:34:46.538851 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:34:46.538854 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0521 19:34:46.538864 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0521 19:34:46.538869 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0521 19:34:46.538858 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:34:46.538876 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0521 19:34:46.538874 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0521 19:34:46.538883 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0521 19:34:46.538883 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0521 19:34:46.538888 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0521 19:34:46.538890 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0521 19:34:46.538889 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0521 19:34:46.538896 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0521 19:34:46.538879 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:34:46.538902 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0521 19:34:46.538906 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:34:46.538908 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0521 19:34:46.538910 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:34:46.538914 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0521 19:34:46.538913 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.538918 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0521 19:34:46.538921 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0521 19:34:46.538892 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0521 19:34:46.538934 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0521 19:34:46.538951 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.538952 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.538959 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.538974 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0521 19:34:46.538966 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0521 19:34:46.538983 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0521 19:34:46.538988 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0521 19:34:46.538995 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0521 19:34:46.539001 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0521 19:34:46.538989 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0521 19:34:46.538993 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0521 19:34:46.539029 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:34:46.539024 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0521 19:34:46.539034 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:34:46.539005 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0521 19:34:46.539048 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0521 19:34:46.539036 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0521 19:34:46.539060 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.539062 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0521 19:34:46.539068 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0521 19:34:46.539038 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:34:46.539192 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:34:46.539197 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:34:46.557764 1 configmap.go:109] updating configmap open-cluster-management-2qegodliprq74gho7aoi2isiraqmm012/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.558134 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.560002 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.560527 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.560782 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.571356 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0521 19:34:46.571412 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.572563 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.572817 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.595308 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:34:46.638286 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0521 19:34:46.638301 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0521 19:34:46.638308 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0521 19:34:46.638313 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0521 19:34:46.638317 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0521 19:34:46.638321 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... W0521 19:34:46.638345 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0521 19:34:46.638346 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0521 19:34:46.647571 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:46.859465 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:47.059155 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:47.276404 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:47.465806 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:47.651660 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:47.851140 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:48.051997 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:48.249905 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:48.451191 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:48.649338 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:48.851034 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:49.051672 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:49.251048 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:49.450220 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:49.649248 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:49.849299 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:50.049344 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:50.251048 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:50.450850 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:50.650106 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:50.848802 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0521 19:34:50.852898 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0521 19:34:51.050479 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:51.250322 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:51.448763 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:51.649382 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:51.849537 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0521 19:34:52.049576 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:52.250213 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:52.449925 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:52.651876 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:52.848547 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:53.049498 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:53.262648 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:53.451404 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:53.651320 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0521 19:34:53.850301 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:54.050313 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:54.249325 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:54.453949 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:54.653116 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0521 19:34:54.851097 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:55.050082 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0521 19:34:55.251569 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:55.450375 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:55.650912 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:55.848890 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:56.052188 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:56.248849 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:56.449370 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:56.650795 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:56.850460 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:57.048146 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:57.251662 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:57.448873 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:57.647423 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:57.848443 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:58.048280 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:58.249266 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:58.448832 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:58.648011 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:58.851407 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:59.048543 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:59.252990 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:59.451225 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:59.649491 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0521 19:34:59.847404 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:00.059674 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:00.248733 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:00.449912 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:00.649764 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:00.849856 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:01.048850 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0521 19:35:10.371926 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0521 19:35:10.384472 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0521 19:35:15.616528 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0521 19:35:15.626409 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0521 19:35:21.974264 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0521 19:35:53.735765 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0521 19:39:02.839249 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0521 19:40:55.649871 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.036828 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.071155 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.105526 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.123174 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.188687 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.286439 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.323228 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:00.359961 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.598612 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:45.057727 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:51.738416 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:55.973156 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0521 19:41:56.061715 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0521 19:41:56.165001 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0521 19:41:56.274880 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0521 19:41:56.362693 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0521 19:41:56.464525 1 configmap.go:109] updating configmap open-cluster-management-2qegodliprq74gho7aoi2isiraqmm012/config-service-cabundle with the service signing CA bundle I0521 19:41:56.561856 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0521 19:41:56.663098 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0521 19:41:56.767709 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0521 19:41:56.916715 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0521 19:41:57.065795 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0521 19:41:57.149921 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0521 19:41:57.213451 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0521 19:41:57.267458 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0521 19:41:57.541635 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0521 19:45:47.715440 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:47.735847 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:47.753113 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:47.767317 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:48.123475 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:48.393562 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:48.427649 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:48.688885 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:49.775723 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:49.869348 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0521 19:45:53.883496 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0521 19:45:53.943661 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0521 19:45:54.024829 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0521 19:45:54.122678 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0521 19:45:54.193690 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0521 19:45:54.282382 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0521 19:45:54.379447 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0521 19:45:54.482284 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0521 19:45:56.145823 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0521 19:45:56.242439 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0521 19:47:49.468645 1 configmap.go:109] updating configmap managed-tenant-e5y28/openshift-service-ca.crt with the service signing CA bundle I0521 19:47:50.718201 1 configmap.go:109] updating configmap managed-tenant-e5y28/config-service-cabundle with the service signing CA bundle W0521 19:54:46.596748 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"