W0507 12:55:26.554155 1 cmd.go:257] Using insecure, self-signed certificates I0507 12:55:26.554338 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778158526 cert, and key in /tmp/serving-cert-4072432497/serving-signer.crt, /tmp/serving-cert-4072432497/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1778158526" is unset, resetting to 157680000000000000 years! I0507 12:55:26.861568 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0507 12:55:26.861902 1 observer_polling.go:159] Starting file observer I0507 12:55:26.861971 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0507 12:55:26.861986 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0507 12:55:26.861991 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0507 12:55:26.861995 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0507 12:55:26.895791 1 builder.go:304] service-ca-controller version - I0507 12:55:26.896412 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4072432497/tls.crt::/tmp/serving-cert-4072432497/tls.key" I0507 12:55:27.570139 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0507 12:55:27.577763 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0507 12:55:27.577779 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0507 12:55:27.577797 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0507 12:55:27.577802 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0507 12:55:27.580799 1 secure_serving.go:57] Forcing use of http/1.1 only I0507 12:55:27.580808 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0507 12:55:27.580824 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0507 12:55:27.580829 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0507 12:55:27.580833 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0507 12:55:27.580835 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0507 12:55:27.580838 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0507 12:55:27.580840 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0507 12:55:27.588284 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0507 12:55:27.588298 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0507 12:55:27.588407 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0507 12:55:27.588378 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0507 12:55:27.588390 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0507 12:55:27.588494 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4072432497/tls.crt::/tmp/serving-cert-4072432497/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778158526\" (2026-05-07 12:55:25 +0000 UTC to 2026-05-07 12:55:26 +0000 UTC (now=2026-05-07 12:55:27.588441387 +0000 UTC))" I0507 12:55:27.588228 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4072432497/tls.crt::/tmp/serving-cert-4072432497/tls.key" I0507 12:55:27.588734 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778158527\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778158527\" (2026-05-07 11:55:26 +0000 UTC to 2027-05-07 11:55:26 +0000 UTC (now=2026-05-07 12:55:27.588676116 +0000 UTC))" I0507 12:55:27.588772 1 secure_serving.go:213] Serving securely on [::]:8443 I0507 12:55:27.588792 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0507 12:55:27.588830 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0507 12:55:27.588854 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0507 12:55:27.589779 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0507 12:55:27.593266 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.595240 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.595243 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.604711 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0507 12:55:27.604756 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"87ea4d2a-e328-4054-a067-e4a7d88f0fb6", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9944", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-f6gh8_93b0c474-9110-48d7-8ae4-fc1ca125d73d became leader I0507 12:55:27.605668 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0507 12:55:27.605677 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0507 12:55:27.605705 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0507 12:55:27.605724 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0507 12:55:27.605732 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0507 12:55:27.605815 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0507 12:55:27.606126 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0507 12:55:27.606379 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0507 12:55:27.606404 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0507 12:55:27.610665 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.613856 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.615154 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.629305 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.665036 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.688865 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0507 12:55:27.688946 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0507 12:55:27.688955 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0507 12:55:27.689099 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-07 12:45:41 +0000 UTC to 2036-05-04 12:45:41 +0000 UTC (now=2026-05-07 12:55:27.689078693 +0000 UTC))" I0507 12:55:27.689339 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4072432497/tls.crt::/tmp/serving-cert-4072432497/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778158526\" (2026-05-07 12:55:25 +0000 UTC to 2026-05-07 12:55:26 +0000 UTC (now=2026-05-07 12:55:27.689314495 +0000 UTC))" I0507 12:55:27.689525 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778158527\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778158527\" (2026-05-07 11:55:26 +0000 UTC to 2027-05-07 11:55:26 +0000 UTC (now=2026-05-07 12:55:27.689512767 +0000 UTC))" I0507 12:55:27.689677 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-07 12:45:42 +0000 UTC to 2036-05-04 12:45:42 +0000 UTC (now=2026-05-07 12:55:27.689666119 +0000 UTC))" I0507 12:55:27.689699 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-07 12:45:46 +0000 UTC to 2036-05-04 12:45:46 +0000 UTC (now=2026-05-07 12:55:27.689689738 +0000 UTC))" I0507 12:55:27.689715 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-07 12:45:49 +0000 UTC to 2036-05-04 12:45:49 +0000 UTC (now=2026-05-07 12:55:27.689707909 +0000 UTC))" I0507 12:55:27.689730 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-07 12:45:52 +0000 UTC to 2036-05-04 12:45:52 +0000 UTC (now=2026-05-07 12:55:27.689723019 +0000 UTC))" I0507 12:55:27.689758 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-07 12:45:56 +0000 UTC to 2036-05-04 12:45:56 +0000 UTC (now=2026-05-07 12:55:27.689750256 +0000 UTC))" I0507 12:55:27.689777 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q53j087pbnvoincjfagms98n05bk2h6-kx-0f9a7805c3_customer-system-admin-signer@1778158050\" [] issuer=\"\" (2026-05-07 12:47:30 +0000 UTC to 2026-05-14 12:47:31 +0000 UTC (now=2026-05-07 12:55:27.689768037 +0000 UTC))" I0507 12:55:27.689804 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q53j087pbnvoincjfagms98n05bk2h6-kx-0f9a7805c3_sre-system-admin-signer@1778158050\" [] issuer=\"\" (2026-05-07 12:47:30 +0000 UTC to 2026-05-14 12:47:31 +0000 UTC (now=2026-05-07 12:55:27.689784878 +0000 UTC))" I0507 12:55:27.689826 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-07 12:45:41 +0000 UTC to 2036-05-04 12:45:41 +0000 UTC (now=2026-05-07 12:55:27.689818779 +0000 UTC))" I0507 12:55:27.690013 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4072432497/tls.crt::/tmp/serving-cert-4072432497/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778158526\" (2026-05-07 12:55:25 +0000 UTC to 2026-05-07 12:55:26 +0000 UTC (now=2026-05-07 12:55:27.689996653 +0000 UTC))" I0507 12:55:27.690164 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778158527\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778158527\" (2026-05-07 11:55:26 +0000 UTC to 2027-05-07 11:55:26 +0000 UTC (now=2026-05-07 12:55:27.690155315 +0000 UTC))" I0507 12:55:27.705781 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0507 12:55:27.705802 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0507 12:55:27.705815 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0507 12:55:27.705820 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0507 12:55:27.705817 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0507 12:55:27.705831 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0507 12:55:27.705835 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0507 12:55:27.705847 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0507 12:55:27.705837 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0507 12:55:27.705863 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0507 12:55:27.705868 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0507 12:55:27.705878 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0507 12:55:27.705885 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0507 12:55:27.705825 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0507 12:55:27.705852 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0507 12:55:27.705912 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0507 12:55:27.705917 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0507 12:55:27.705928 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0507 12:55:27.705929 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0507 12:55:27.706608 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0507 12:55:27.706617 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0507 12:55:27.706622 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0507 12:55:27.706626 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0507 12:55:27.706629 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0507 12:55:27.706632 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0507 12:55:27.706732 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0507 12:55:27.706746 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0507 12:55:27.706751 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0507 12:55:27.706755 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0507 12:55:27.706757 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0507 12:55:27.706760 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0507 12:55:27.712781 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.781663 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0507 12:55:27.805982 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0507 12:55:27.806009 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0507 12:55:27.806007 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0507 12:55:27.806019 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0507 12:55:27.806022 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0507 12:55:27.806026 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0507 12:55:27.806030 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0507 12:55:27.806033 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0507 12:55:27.806035 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0507 12:55:27.806038 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0507 12:55:27.806066 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.806072 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0507 12:55:27.806087 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0507 12:55:27.806039 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0507 12:55:27.806108 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0507 12:55:27.806114 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.806133 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.806131 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.806151 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.806012 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0507 12:55:27.806219 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0507 12:55:27.806245 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0507 12:55:27.806253 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0507 12:55:27.806258 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0507 12:55:27.806263 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0507 12:55:27.818935 1 configmap.go:109] updating configmap open-cluster-management-2q53j087pbnvoincjfagms98n05bk2h6/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.821638 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.822934 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.823044 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.823049 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.833624 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0507 12:55:27.834582 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.838683 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.843585 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:27.843654 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:28.017427 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:28.219122 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:28.435156 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:28.637119 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:28.820303 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:29.019992 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:29.225507 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:29.423210 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:29.624920 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:29.819994 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:30.018590 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:30.219228 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:30.426078 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:30.618450 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:30.819084 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:31.020948 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:31.219258 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:31.420580 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:31.621749 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0507 12:55:31.819857 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0507 12:55:31.820514 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:32.019807 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:32.219312 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:32.420516 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:32.620982 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:32.820878 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0507 12:55:33.017934 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:33.220376 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:33.418337 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:33.619095 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:33.821319 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:34.019377 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:34.224039 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:34.417864 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:34.618437 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0507 12:55:34.819627 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:35.020901 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:35.221347 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:35.420437 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:35.617799 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0507 12:55:35.819587 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:36.020891 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0507 12:55:36.219574 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:36.421892 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:36.620501 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:36.819269 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:37.022865 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:37.220941 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:37.423170 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:37.621858 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:37.820188 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:38.020131 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:38.221659 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:38.420597 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:38.620389 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:38.819571 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:39.018693 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:39.222738 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:39.429294 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:39.617321 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:39.821186 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:40.018775 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:40.217990 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:40.418174 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:40.619865 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:40.819523 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:41.028099 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:41.221181 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:41.437186 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:41.619145 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:41.818092 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:42.018414 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0507 12:55:50.344442 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0507 12:55:50.356656 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0507 12:55:53.525364 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0507 12:55:55.540127 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0507 12:55:55.540183 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0507 12:56:29.847502 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0507 12:59:42.711358 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0507 13:06:28.426598 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.697148 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.714134 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.732449 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.753543 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.765210 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.785493 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.827275 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0507 13:06:32.852218 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0507 13:07:07.834538 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0507 13:07:17.024605 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0507 13:07:25.099974 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0507 13:07:29.165871 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0507 13:07:29.214155 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0507 13:07:29.320555 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0507 13:07:29.413611 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0507 13:07:29.514505 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0507 13:07:29.611433 1 configmap.go:109] updating configmap open-cluster-management-2q53j087pbnvoincjfagms98n05bk2h6/config-service-cabundle with the service signing CA bundle I0507 13:07:29.723904 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0507 13:07:29.827805 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0507 13:07:29.916005 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0507 13:07:30.043562 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0507 13:07:30.114722 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0507 13:07:30.223059 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0507 13:07:30.317305 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0507 13:07:30.411274 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0507 13:07:30.568044 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0507 13:11:27.806338 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:27.823152 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:27.845546 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:27.856613 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:28.056210 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:28.319201 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:28.489284 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:28.692555 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:29.272179 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:29.382177 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0507 13:11:32.956140 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0507 13:11:33.046514 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0507 13:11:33.093481 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0507 13:11:33.168868 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0507 13:11:33.285155 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0507 13:11:33.370556 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0507 13:11:33.479646 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0507 13:11:33.576298 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0507 13:11:33.682143 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0507 13:11:33.777522 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0507 13:13:34.530432 1 configmap.go:109] updating configmap managed-tenant-bhr9i/openshift-service-ca.crt with the service signing CA bundle I0507 13:13:35.777390 1 configmap.go:109] updating configmap managed-tenant-bhr9i/config-service-cabundle with the service signing CA bundle W0507 13:15:27.783407 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0507 13:35:27.783504 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"