I0423 19:59:30.865317 1 cmd.go:253] Using service-serving-cert provided certificates I0423 19:59:30.865749 1 observer_polling.go:159] Starting file observer I0423 19:59:31.750991 1 operator.go:76] Starting insights-operator v0.0.0-master+$Format:%H$ I0423 19:59:31.751485 1 legacy_config.go:327] Current config: {"report":false,"storagePath":"/var/lib/insights-operator","interval":"2h","endpoint":"https://console.redhat.com/api/ingress/v1/upload","conditionalGathererEndpoint":"https://console.redhat.com/api/gathering/v2/%s/gathering_rules","pull_report":{"endpoint":"https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/reports","delay":"60s","timeout":"3000s","min_retry":"30s"},"impersonate":"system:serviceaccount:openshift-insights:gather","enableGlobalObfuscation":false,"ocm":{"scaEndpoint":"https://api.openshift.com/api/accounts_mgmt/v1/entitlement_certificates","scaInterval":"8h","scaDisabled":false,"clusterTransferEndpoint":"https://api.openshift.com/api/accounts_mgmt/v1/cluster_transfers/","clusterTransferInterval":"12h"},"disableInsightsAlerts":false,"processingStatusEndpoint":"https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/request/%s/status","reportEndpointTechPreview":"https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/request/%s/report"} I0423 19:59:31.752285 1 secure_serving.go:57] Forcing use of http/1.1 only W0423 19:59:31.752306 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0423 19:59:31.752311 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0423 19:59:31.752316 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0423 19:59:31.752318 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0423 19:59:31.752321 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0423 19:59:31.752323 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0423 19:59:31.752640 1 simple_featuregate_reader.go:171] Starting feature-gate-detector I0423 19:59:31.756897 1 operator.go:141] FeatureGates initialized: knownFeatureGates=[AdditionalRoutingCapabilities AdminNetworkPolicy AlibabaPlatform AzureWorkloadIdentity BuildCSIVolumes CPMSMachineNamePrefix ConsolePluginContentSecurityPolicy ExternalOIDC ExternalOIDCWithUIDAndExtraClaimMappings GCPClusterHostedDNSInstall GatewayAPI GatewayAPIController HighlyAvailableArbiter HyperShiftOnlyDynamicResourceAllocation ImageStreamImportMode ImageVolume KMSv1 MachineConfigNodes ManagedBootImages ManagedBootImagesAWS ManagedBootImagesAzure ManagedBootImagesvSphere MetricsCollectionProfiles NetworkDiagnosticsConfig NetworkLiveMigration NetworkSegmentation PinnedImages PreconfiguredUDNAddresses ProcMountType RouteAdvertisements RouteExternalCertificate ServiceAccountTokenNodeBinding SigstoreImageVerification SigstoreImageVerificationPKI StoragePerformantSecurityPolicy UpgradeStatus UserNamespacesPodSecurityStandards UserNamespacesSupport VSphereMultiDisk VSphereMultiNetworks VolumeAttributesClass AWSClusterHostedDNS AWSClusterHostedDNSInstall AWSDedicatedHosts AWSDualStackInstall AWSServiceLBNetworkSecurityGroup AutomatedEtcdBackup AzureClusterHostedDNSInstall AzureDedicatedHosts AzureDualStackInstall AzureMultiDisk BootImageSkewEnforcement BootcNodeManagement CBORServingAndStorage CRDCompatibilityRequirementOperator ClientsAllowCBOR ClientsPreferCBOR ClusterAPIInstall ClusterAPIInstallIBMCloud ClusterAPIMachineManagement ClusterAPIMachineManagementVSphere ClusterMonitoringConfig ClusterVersionOperatorConfiguration DNSNameResolver DualReplica DyanmicServiceEndpointIBMCloud EtcdBackendQuota EventTTL EventedPLEG Example Example2 ExternalSnapshotMetadata GCPClusterHostedDNS GCPCustomAPIEndpoints GCPCustomAPIEndpointsInstall GCPDualStackInstall ImageModeStatusReporting IngressControllerDynamicConfigurationManager InsightsConfig InsightsOnDemandDataGather IrreconcilableMachineConfig KMSEncryption KMSEncryptionProvider MachineAPIMigration MachineAPIOperatorDisableMachineHealthCheckController ManagedBootImagesCPMS MaxUnavailableStatefulSet MinimumKubeletVersion MixedCPUsAllocation MultiArchInstallAzure MultiDiskSetup MutableCSINodeAllocatableCount MutatingAdmissionPolicy NewOLM NewOLMBoxCutterRuntime NewOLMCatalogdAPIV1Metas NewOLMOwnSingleNamespace NewOLMPreflightPermissionChecks NewOLMWebhookProviderOpenshiftServiceCA NoRegistryClusterInstall NutanixMultiSubnets OSStreams OVNObservability OnPremDNSRecords OpenShiftPodSecurityAdmission ProvisioningRequestAvailable SELinuxMount ShortCertRotation SignatureStores TranslateStreamCloseWebsocketRequests VSphereConfigurableMaxAllowedBlockVolumesPerNode VSphereHostVMGroupZonal VSphereMixedNodeEnv VolumeGroupSnapshot] I0423 19:59:31.756921 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-insights", Name:"insights-operator", UID:"5f9c271e-bb60-43dc-a988-4071dc9e981f", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'FeatureGatesInitialized' FeatureGates updated to featuregates.Features{Enabled:[]v1.FeatureGateName{"AdditionalRoutingCapabilities", "AdminNetworkPolicy", "AlibabaPlatform", "AzureWorkloadIdentity", "BuildCSIVolumes", "CPMSMachineNamePrefix", "ConsolePluginContentSecurityPolicy", "ExternalOIDC", "ExternalOIDCWithUIDAndExtraClaimMappings", "GCPClusterHostedDNSInstall", "GatewayAPI", "GatewayAPIController", "HighlyAvailableArbiter", "HyperShiftOnlyDynamicResourceAllocation", "ImageStreamImportMode", "ImageVolume", "KMSv1", "MachineConfigNodes", "ManagedBootImages", "ManagedBootImagesAWS", "ManagedBootImagesAzure", "ManagedBootImagesvSphere", "MetricsCollectionProfiles", "NetworkDiagnosticsConfig", "NetworkLiveMigration", "NetworkSegmentation", "PinnedImages", "PreconfiguredUDNAddresses", "ProcMountType", "RouteAdvertisements", "RouteExternalCertificate", "ServiceAccountTokenNodeBinding", "SigstoreImageVerification", "SigstoreImageVerificationPKI", "StoragePerformantSecurityPolicy", "UpgradeStatus", "UserNamespacesPodSecurityStandards", "UserNamespacesSupport", "VSphereMultiDisk", "VSphereMultiNetworks", "VolumeAttributesClass"}, Disabled:[]v1.FeatureGateName{"AWSClusterHostedDNS", "AWSClusterHostedDNSInstall", "AWSDedicatedHosts", "AWSDualStackInstall", "AWSServiceLBNetworkSecurityGroup", "AutomatedEtcdBackup", "AzureClusterHostedDNSInstall", "AzureDedicatedHosts", "AzureDualStackInstall", "AzureMultiDisk", "BootImageSkewEnforcement", "BootcNodeManagement", "CBORServingAndStorage", "CRDCompatibilityRequirementOperator", "ClientsAllowCBOR", "ClientsPreferCBOR", "ClusterAPIInstall", "ClusterAPIInstallIBMCloud", "ClusterAPIMachineManagement", "ClusterAPIMachineManagementVSphere", "ClusterMonitoringConfig", "ClusterVersionOperatorConfiguration", "DNSNameResolver", "DualReplica", "DyanmicServiceEndpointIBMCloud", "EtcdBackendQuota", "EventTTL", "EventedPLEG", "Example", "Example2", "ExternalSnapshotMetadata", "GCPClusterHostedDNS", "GCPCustomAPIEndpoints", "GCPCustomAPIEndpointsInstall", "GCPDualStackInstall", "ImageModeStatusReporting", "IngressControllerDynamicConfigurationManager", "InsightsConfig", "InsightsOnDemandDataGather", "IrreconcilableMachineConfig", "KMSEncryption", "KMSEncryptionProvider", "MachineAPIMigration", "MachineAPIOperatorDisableMachineHealthCheckController", "ManagedBootImagesCPMS", "MaxUnavailableStatefulSet", "MinimumKubeletVersion", "MixedCPUsAllocation", "MultiArchInstallAzure", "MultiDiskSetup", "MutableCSINodeAllocatableCount", "MutatingAdmissionPolicy", "NewOLM", "NewOLMBoxCutterRuntime", "NewOLMCatalogdAPIV1Metas", "NewOLMOwnSingleNamespace", "NewOLMPreflightPermissionChecks", "NewOLMWebhookProviderOpenshiftServiceCA", "NoRegistryClusterInstall", "NutanixMultiSubnets", "OSStreams", "OVNObservability", "OnPremDNSRecords", "OpenShiftPodSecurityAdmission", "ProvisioningRequestAvailable", "SELinuxMount", "ShortCertRotation", "SignatureStores", "TranslateStreamCloseWebsocketRequests", "VSphereConfigurableMaxAllowedBlockVolumesPerNode", "VSphereHostVMGroupZonal", "VSphereMixedNodeEnv", "VolumeGroupSnapshot"}} I0423 19:59:31.761497 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0423 19:59:31.761519 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0423 19:59:31.761524 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0423 19:59:31.761540 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0423 19:59:31.761540 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0423 19:59:31.761530 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0423 19:59:31.761806 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/var/run/secrets/serving-cert/tls.crt::/var/run/secrets/serving-cert/tls.key" I0423 19:59:31.762049 1 secure_serving.go:213] Serving securely on [::]:8443 I0423 19:59:31.762084 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" W0423 19:59:31.762900 1 configmapobserver.go:64] Cannot get the configuration config map: configmaps "insights-config" not found. Default configuration is used. I0423 19:59:31.762928 1 secretconfigobserver.go:216] Legacy configuration set: enabled=false endpoint=https://console.redhat.com/api/ingress/v1/upload conditional_gatherer_endpoint=https://console.redhat.com/api/gathering/v2/%s/gathering_rules interval=2h0m0s token=false reportEndpoint=https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/reports initialPollingDelay=1m0s minRetryTime=30s pollingTimeout=50m0s processingStatusEndpoint=https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/request/%s/status I0423 19:59:31.763058 1 base_controller.go:76] Waiting for caches to sync for ConfigController I0423 19:59:31.773374 1 secretconfigobserver.go:249] Found cloud.openshift.com token I0423 19:59:31.773390 1 secretconfigobserver.go:204] Legacy configuration updated: enabled=true endpoint=https://console.redhat.com/api/ingress/v1/upload conditional_gatherer_endpoint=https://console.redhat.com/api/gathering/v2/%s/gathering_rules interval=2h0m0s token=true reportEndpoint=https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/reports initialPollingDelay=1m0s minRetryTime=30s pollingTimeout=50m0s processingStatusEndpoint=https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/request/%s/status I0423 19:59:31.777491 1 secretconfigobserver.go:119] support secret does not exist I0423 19:59:31.784130 1 secretconfigobserver.go:249] Found cloud.openshift.com token I0423 19:59:31.788438 1 secretconfigobserver.go:119] support secret does not exist I0423 19:59:31.792102 1 recorder.go:176] Pruning old reports every 4h36m13s, max age is 288h0m0s I0423 19:59:31.796969 1 operator.go:356] The last pod state is unhealthy I0423 19:59:31.862044 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0423 19:59:31.862060 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0423 19:59:31.862062 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0423 19:59:31.863114 1 base_controller.go:82] Caches are synced for ConfigController I0423 19:59:31.863125 1 base_controller.go:119] Starting #1 worker of ConfigController controller ... I0423 19:59:31.872420 1 configmapobserver.go:84] configmaps "insights-config" not found I0423 19:59:51.800530 1 operator.go:356] The last pod state is unhealthy I0423 20:00:11.800153 1 operator.go:356] The last pod state is unhealthy I0423 20:00:31.804586 1 operator.go:356] The last pod state is unhealthy I0423 20:00:51.801170 1 operator.go:356] The last pod state is unhealthy I0423 20:01:11.801061 1 operator.go:356] The last pod state is unhealthy I0423 20:01:31.798565 1 operator.go:356] The last pod state is unhealthy I0423 20:01:51.800593 1 operator.go:356] The last pod state is unhealthy I0423 20:02:11.803398 1 operator.go:356] The last pod state is unhealthy I0423 20:02:31.803018 1 operator.go:356] The last pod state is unhealthy I0423 20:02:51.799739 1 operator.go:356] The last pod state is unhealthy I0423 20:03:11.801186 1 operator.go:356] The last pod state is unhealthy I0423 20:03:31.804990 1 operator.go:356] The last pod state is unhealthy I0423 20:03:51.803837 1 operator.go:356] The last pod state is unhealthy I0423 20:04:11.804648 1 operator.go:356] The last pod state is unhealthy I0423 20:04:31.797287 1 secretconfigobserver.go:249] Found cloud.openshift.com token I0423 20:04:31.798289 1 operator.go:356] The last pod state is unhealthy I0423 20:04:31.801996 1 secretconfigobserver.go:119] support secret does not exist I0423 20:04:51.798535 1 operator.go:356] The last pod state is unhealthy I0423 20:04:58.672870 1 operator.go:288] Unable to check insights-operator pod status. Setting initial delay to 11m8.191494167s I0423 20:04:58.672953 1 controllerstatus.go:80] name=insightsuploader healthy=true reason= message= I0423 20:04:58.672976 1 insightsuploader.go:86] Reporting status periodically to https://console.redhat.com/api/ingress/v1/upload every 2h0m0s, starting in 12m38s I0423 20:04:58.672996 1 controllerstatus.go:80] name=insightsreport healthy=true reason= message= I0423 20:04:58.673003 1 insightsreport.go:296] Starting report retriever I0423 20:04:58.673008 1 insightsreport.go:298] Insights analysis reports will be downloaded from the https://console.redhat.com/api/insights-results-aggregator/v2/cluster/%s/reports endpoint with a delay of 1m0s I0423 20:04:58.678941 1 controller.go:129] Initializing last reported time to 0001-01-01T00:00:00Z I0423 20:04:58.678964 1 controller.go:368] The initial operator extension status is healthy I0423 20:04:58.678972 1 controller.go:254] Source periodic-conditional *controllerstatus.Simple is not ready I0423 20:04:58.678977 1 controller.go:254] Source periodic-workloads *controllerstatus.Simple is not ready I0423 20:04:58.678981 1 controller.go:254] Source periodic-clusterconfig *controllerstatus.Simple is not ready I0423 20:04:58.678998 1 controller.go:531] The operator is still being initialized I0423 20:04:58.679003 1 controller.go:554] The operator is healthy I0423 20:04:58.679078 1 sca.go:136] Pulling SCA certificates from https://api.openshift.com/api/accounts_mgmt/v1/entitlement_certificates. Next check is in 8h0m0s I0423 20:04:58.679098 1 cluster_transfer.go:83] checking the availability of cluster transfer. Next check is in 12h0m0s W0423 20:04:58.679263 1 operator.go:328] started I0423 20:04:58.679290 1 base_controller.go:76] Waiting for caches to sync for LoggingSyncer I0423 20:04:58.685947 1 controller.go:254] Source clusterTransferController *clustertransfer.Controller is not ready I0423 20:04:58.685964 1 controller.go:254] Source periodic-clusterconfig *controllerstatus.Simple is not ready I0423 20:04:58.685968 1 controller.go:254] Source periodic-conditional *controllerstatus.Simple is not ready I0423 20:04:58.685972 1 controller.go:254] Source periodic-workloads *controllerstatus.Simple is not ready I0423 20:04:58.685976 1 controller.go:254] Source scaController *sca.Controller is not ready I0423 20:04:58.685995 1 controller.go:531] The operator is still being initialized I0423 20:04:58.686004 1 controller.go:554] The operator is healthy I0423 20:04:58.695569 1 requests.go:205] Asking for SCA certificate with "{"arch": ["x86_64"]}" payload I0423 20:04:58.779483 1 base_controller.go:82] Caches are synced for LoggingSyncer I0423 20:04:58.779509 1 base_controller.go:119] Starting #1 worker of LoggingSyncer controller ... I0423 20:04:58.783061 1 cluster_transfer.go:102] no available accepted cluster transfer I0423 20:04:58.783076 1 controllerstatus.go:80] name=clusterTransferController healthy=true reason=NoClusterTransfer message=no available cluster transfer I0423 20:04:58.864236 1 sca.go:266] etc-pki-entitlement secret successfully created I0423 20:04:58.864257 1 controllerstatus.go:80] name=scaController healthy=true reason=Updated message=SCA certs successfully updated