W0428 15:37:40.499665 1 cmd.go:257] Using insecure, self-signed certificates I0428 15:37:40.499902 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777390660 cert, and key in /tmp/serving-cert-1810320638/serving-signer.crt, /tmp/serving-cert-1810320638/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777390660" is unset, resetting to 157680000000000000 years! I0428 15:37:40.933917 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0428 15:37:40.934238 1 observer_polling.go:159] Starting file observer I0428 15:37:40.934315 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0428 15:37:40.934327 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0428 15:37:40.934332 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0428 15:37:40.934336 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0428 15:37:40.974857 1 builder.go:304] service-ca-controller version - I0428 15:37:40.975556 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1810320638/tls.crt::/tmp/serving-cert-1810320638/tls.key" I0428 15:37:41.148193 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0428 15:37:41.154248 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0428 15:37:41.154268 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0428 15:37:41.154288 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0428 15:37:41.154293 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0428 15:37:41.157873 1 secure_serving.go:57] Forcing use of http/1.1 only I0428 15:37:41.157885 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0428 15:37:41.157891 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0428 15:37:41.157895 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0428 15:37:41.157899 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0428 15:37:41.157901 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0428 15:37:41.157904 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0428 15:37:41.157906 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0428 15:37:41.170057 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0428 15:37:41.170073 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0428 15:37:41.170109 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 15:37:41.170085 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0428 15:37:41.170121 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0428 15:37:41.170142 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 15:37:41.170366 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1810320638/tls.crt::/tmp/serving-cert-1810320638/tls.key" I0428 15:37:41.170466 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1810320638/tls.crt::/tmp/serving-cert-1810320638/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777390660\" (2026-04-28 15:37:39 +0000 UTC to 2026-04-28 15:37:40 +0000 UTC (now=2026-04-28 15:37:41.170445497 +0000 UTC))" I0428 15:37:41.170727 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777390661\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777390661\" (2026-04-28 14:37:40 +0000 UTC to 2027-04-28 14:37:40 +0000 UTC (now=2026-04-28 15:37:41.170710705 +0000 UTC))" I0428 15:37:41.170797 1 secure_serving.go:213] Serving securely on [::]:8443 I0428 15:37:41.170815 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0428 15:37:41.170815 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0428 15:37:41.171423 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0428 15:37:41.175467 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.175468 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.175494 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.186874 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0428 15:37:41.186952 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"8d01b741-769c-4cff-aa9e-ed9197e16cd7", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9256", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-mrsxs_f17f040d-33a0-487c-abf6-a7f4cacd7855 became leader I0428 15:37:41.189801 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0428 15:37:41.189817 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0428 15:37:41.189819 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0428 15:37:41.189802 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0428 15:37:41.189828 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0428 15:37:41.189854 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0428 15:37:41.190265 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0428 15:37:41.190532 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0428 15:37:41.190548 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0428 15:37:41.196360 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.196470 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.196960 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.205688 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.265244 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.270864 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0428 15:37:41.270940 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0428 15:37:41.270957 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0428 15:37:41.271042 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 15:28:01 +0000 UTC to 2036-04-25 15:28:01 +0000 UTC (now=2026-04-28 15:37:41.271016401 +0000 UTC))" I0428 15:37:41.271261 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1810320638/tls.crt::/tmp/serving-cert-1810320638/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777390660\" (2026-04-28 15:37:39 +0000 UTC to 2026-04-28 15:37:40 +0000 UTC (now=2026-04-28 15:37:41.271248044 +0000 UTC))" I0428 15:37:41.271439 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777390661\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777390661\" (2026-04-28 14:37:40 +0000 UTC to 2027-04-28 14:37:40 +0000 UTC (now=2026-04-28 15:37:41.271426497 +0000 UTC))" I0428 15:37:41.271606 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-28 15:28:02 +0000 UTC to 2036-04-25 15:28:02 +0000 UTC (now=2026-04-28 15:37:41.271594919 +0000 UTC))" I0428 15:37:41.271626 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-28 15:28:05 +0000 UTC to 2036-04-25 15:28:05 +0000 UTC (now=2026-04-28 15:37:41.271617338 +0000 UTC))" I0428 15:37:41.271643 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-28 15:28:07 +0000 UTC to 2036-04-25 15:28:07 +0000 UTC (now=2026-04-28 15:37:41.271634964 +0000 UTC))" I0428 15:37:41.271660 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-28 15:28:10 +0000 UTC to 2036-04-25 15:28:10 +0000 UTC (now=2026-04-28 15:37:41.271652436 +0000 UTC))" I0428 15:37:41.271677 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-28 15:28:12 +0000 UTC to 2036-04-25 15:28:12 +0000 UTC (now=2026-04-28 15:37:41.2716682 +0000 UTC))" I0428 15:37:41.271703 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pv84nia58gje8norbmmjqtj26oprnd8-kx-6952a9a844_customer-system-admin-signer@1777390216\" [] issuer=\"\" (2026-04-28 15:30:15 +0000 UTC to 2026-05-05 15:30:16 +0000 UTC (now=2026-04-28 15:37:41.271692767 +0000 UTC))" I0428 15:37:41.271729 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pv84nia58gje8norbmmjqtj26oprnd8-kx-6952a9a844_sre-system-admin-signer@1777390216\" [] issuer=\"\" (2026-04-28 15:30:18 +0000 UTC to 2026-05-05 15:30:19 +0000 UTC (now=2026-04-28 15:37:41.271719424 +0000 UTC))" I0428 15:37:41.271745 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-28 15:28:01 +0000 UTC to 2036-04-25 15:28:01 +0000 UTC (now=2026-04-28 15:37:41.271737717 +0000 UTC))" I0428 15:37:41.271906 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1810320638/tls.crt::/tmp/serving-cert-1810320638/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777390660\" (2026-04-28 15:37:39 +0000 UTC to 2026-04-28 15:37:40 +0000 UTC (now=2026-04-28 15:37:41.27189547 +0000 UTC))" I0428 15:37:41.272059 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777390661\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777390661\" (2026-04-28 14:37:40 +0000 UTC to 2027-04-28 14:37:40 +0000 UTC (now=2026-04-28 15:37:41.272050346 +0000 UTC))" I0428 15:37:41.290157 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0428 15:37:41.290167 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0428 15:37:41.290179 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0428 15:37:41.290187 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0428 15:37:41.290193 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0428 15:37:41.290198 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0428 15:37:41.290202 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0428 15:37:41.290170 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:37:41.290231 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:37:41.290236 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:37:41.290241 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:37:41.290246 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0428 15:37:41.290187 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0428 15:37:41.290259 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0428 15:37:41.290263 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0428 15:37:41.290266 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0428 15:37:41.290268 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0428 15:37:41.290272 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0428 15:37:41.290273 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0428 15:37:41.290578 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0428 15:37:41.290588 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0428 15:37:41.290598 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0428 15:37:41.290603 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0428 15:37:41.290606 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0428 15:37:41.290611 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0428 15:37:41.290614 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0428 15:37:41.290589 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0428 15:37:41.290629 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0428 15:37:41.290633 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0428 15:37:41.290637 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0428 15:37:41.290640 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0428 15:37:41.337542 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.390838 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0428 15:37:41.390857 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0428 15:37:41.390879 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0428 15:37:41.390890 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0428 15:37:41.390897 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0428 15:37:41.390901 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0428 15:37:41.390905 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0428 15:37:41.390942 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.390950 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.390866 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:37:41.390973 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.390980 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:37:41.390998 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:37:41.391005 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:37:41.391022 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0428 15:37:41.391001 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.391030 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.408099 1 configmap.go:109] updating configmap open-cluster-management-2pv84nia58gje8norbmmjqtj26oprnd8/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.409036 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0428 15:37:41.420648 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.420648 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.420701 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.420758 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.437735 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0428 15:37:41.439763 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.445837 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.445847 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.446234 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.490883 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0428 15:37:41.490911 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0428 15:37:41.490920 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0428 15:37:41.490923 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0428 15:37:41.490926 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0428 15:37:41.490928 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0428 15:37:41.490960 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0428 15:37:41.490985 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0428 15:37:41.606756 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:41.822490 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:42.035607 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:42.218529 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:42.408725 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:42.603126 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:42.810174 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:43.015583 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:43.209946 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:43.404560 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:43.603370 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:43.803943 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:44.002516 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:44.201116 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:44.410932 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:44.602186 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:44.802529 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:45.004530 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:45.215101 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:45.413677 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:45.603280 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:45.807281 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:46.008031 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:46.205070 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:46.403851 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0428 15:37:46.601923 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:46.802621 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:47.005901 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:47.200872 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:47.401825 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:47.605697 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:47.801897 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:48.002706 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:48.204555 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0428 15:37:48.402246 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:48.601887 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:48.808610 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:49.004021 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:49.201993 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0428 15:37:49.406604 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:49.603453 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0428 15:37:49.801688 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:50.003393 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:50.203843 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:50.405018 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:50.604044 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:50.801977 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:51.003130 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:51.203509 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:51.403895 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:51.603015 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:51.803125 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:52.006980 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:52.204126 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:52.400666 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:52.599912 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:52.801711 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:53.001117 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:53.201643 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:53.402541 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:53.601622 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:53.802663 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:54.001781 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:54.200146 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:54.404487 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:54.600571 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:54.800611 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:55.001292 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:55.199793 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:55.406885 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0428 15:37:55.599863 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0428 15:38:10.726031 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0428 15:38:10.737496 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0428 15:38:11.882330 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0428 15:38:17.933008 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0428 15:38:17.933062 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0428 15:38:51.029978 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0428 15:39:46.676799 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0428 15:45:47.774737 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.445819 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.463376 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.487487 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.506002 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.509935 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.519561 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.533867 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0428 15:45:51.541169 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0428 15:46:13.737439 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0428 15:46:45.010953 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0428 15:46:53.227073 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0428 15:46:56.979506 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0428 15:46:57.088036 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0428 15:46:57.164668 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0428 15:46:57.220627 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0428 15:46:57.328291 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0428 15:46:57.423533 1 configmap.go:109] updating configmap open-cluster-management-2pv84nia58gje8norbmmjqtj26oprnd8/config-service-cabundle with the service signing CA bundle I0428 15:46:57.525451 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0428 15:46:57.626511 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0428 15:46:57.734125 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0428 15:46:57.833308 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0428 15:46:57.921062 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0428 15:46:58.033440 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0428 15:46:58.133781 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0428 15:46:58.221559 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0428 15:46:58.475521 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0428 15:50:30.726446 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:30.739414 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:30.754410 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:30.767733 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:31.117601 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:31.366825 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:31.566570 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:31.676440 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:32.304613 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:32.857000 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0428 15:50:35.400671 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0428 15:50:35.692700 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0428 15:50:35.825144 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0428 15:50:35.904658 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0428 15:50:35.978651 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0428 15:50:38.251216 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0428 15:50:38.337369 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0428 15:50:38.439170 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0428 15:50:38.539817 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0428 15:50:38.637397 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0428 15:52:32.888209 1 configmap.go:109] updating configmap managed-tenant-v8l0n/openshift-service-ca.crt with the service signing CA bundle I0428 15:52:34.268047 1 configmap.go:109] updating configmap managed-tenant-v8l0n/config-service-cabundle with the service signing CA bundle W0428 15:57:41.410840 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"