W0506 03:07:19.303058       1 cmd.go:257] Using insecure, self-signed certificates
I0506 03:07:19.303258       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1778036839 cert, and key in /tmp/serving-cert-4006555071/serving-signer.crt, /tmp/serving-cert-4006555071/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1778036839" is unset, resetting to 157680000000000000 years!
I0506 03:07:19.530457       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0506 03:07:19.530769       1 observer_polling.go:159] Starting file observer
I0506 03:07:19.530835       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0506 03:07:19.530847       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0506 03:07:19.530852       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0506 03:07:19.530856       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0506 03:07:19.554052       1 builder.go:304] service-ca-controller version -
I0506 03:07:19.554665       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4006555071/tls.crt::/tmp/serving-cert-4006555071/tls.key"
I0506 03:07:20.379674       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0506 03:07:20.384714       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0506 03:07:20.384732       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0506 03:07:20.384756       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0506 03:07:20.384761       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0506 03:07:20.389071       1 secure_serving.go:57] Forcing use of http/1.1 only
I0506 03:07:20.389081       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
W0506 03:07:20.389090       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0506 03:07:20.389094       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0506 03:07:20.389098       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0506 03:07:20.389101       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0506 03:07:20.389103       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0506 03:07:20.389106       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0506 03:07:20.393857       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0506 03:07:20.393856       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0506 03:07:20.393891       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0506 03:07:20.393863       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0506 03:07:20.393936       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0506 03:07:20.393893       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0506 03:07:20.394117       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4006555071/tls.crt::/tmp/serving-cert-4006555071/tls.key"
I0506 03:07:20.394212       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4006555071/tls.crt::/tmp/serving-cert-4006555071/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778036839\" (2026-05-06 03:07:18 +0000 UTC to 2026-05-06 03:07:19 +0000 UTC (now=2026-05-06 03:07:20.394189507 +0000 UTC))"
I0506 03:07:20.394374       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778036840\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778036840\" (2026-05-06 02:07:19 +0000 UTC to 2027-05-06 02:07:19 +0000 UTC (now=2026-05-06 03:07:20.394358428 +0000 UTC))"
I0506 03:07:20.394392       1 secure_serving.go:213] Serving securely on [::]:8443
I0506 03:07:20.394410       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0506 03:07:20.394423       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0506 03:07:20.395155       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0506 03:07:20.397387       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.397574       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.398217       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.405848       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0506 03:07:20.405892       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"3f4eaecc-2579-4df1-8e2c-1f4f19793ccc", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10289", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-dp68v_bd84fe97-1f35-427e-9b9e-dfca567614bb became leader
I0506 03:07:20.406822       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0506 03:07:20.406825       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0506 03:07:20.406843       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0506 03:07:20.406825       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0506 03:07:20.406857       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0506 03:07:20.406935       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0506 03:07:20.407634       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0506 03:07:20.407816       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0506 03:07:20.407865       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0506 03:07:20.412527       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.412988       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.413233       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.413794       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.463135       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.494673       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0506 03:07:20.494690       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0506 03:07:20.494675       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0506 03:07:20.494865       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:37 +0000 UTC to 2036-05-03 02:55:37 +0000 UTC (now=2026-05-06 03:07:20.494840782 +0000 UTC))"
I0506 03:07:20.495068       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4006555071/tls.crt::/tmp/serving-cert-4006555071/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778036839\" (2026-05-06 03:07:18 +0000 UTC to 2026-05-06 03:07:19 +0000 UTC (now=2026-05-06 03:07:20.495056457 +0000 UTC))"
I0506 03:07:20.495231       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778036840\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778036840\" (2026-05-06 02:07:19 +0000 UTC to 2027-05-06 02:07:19 +0000 UTC (now=2026-05-06 03:07:20.495220035 +0000 UTC))"
I0506 03:07:20.495368       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:43 +0000 UTC to 2036-05-03 02:55:43 +0000 UTC (now=2026-05-06 03:07:20.495351224 +0000 UTC))"
I0506 03:07:20.495390       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:46 +0000 UTC to 2036-05-03 02:55:46 +0000 UTC (now=2026-05-06 03:07:20.495380969 +0000 UTC))"
I0506 03:07:20.495405       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:47 +0000 UTC to 2036-05-03 02:55:47 +0000 UTC (now=2026-05-06 03:07:20.495397446 +0000 UTC))"
I0506 03:07:20.495440       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:49 +0000 UTC to 2036-05-03 02:55:49 +0000 UTC (now=2026-05-06 03:07:20.495427359 +0000 UTC))"
I0506 03:07:20.495465       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:51 +0000 UTC to 2036-05-03 02:55:51 +0000 UTC (now=2026-05-06 03:07:20.495452398 +0000 UTC))"
I0506 03:07:20.495491       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q45svcivdm15p3pj0gf8q8sbn6f50mb-kx-fe582da664_customer-system-admin-signer@1778036266\" [] issuer=\"<self>\" (2026-05-06 02:57:46 +0000 UTC to 2026-05-13 02:57:47 +0000 UTC (now=2026-05-06 03:07:20.495476208 +0000 UTC))"
I0506 03:07:20.495529       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q45svcivdm15p3pj0gf8q8sbn6f50mb-kx-fe582da664_sre-system-admin-signer@1778036266\" [] issuer=\"<self>\" (2026-05-06 02:57:46 +0000 UTC to 2026-05-13 02:57:47 +0000 UTC (now=2026-05-06 03:07:20.495506545 +0000 UTC))"
I0506 03:07:20.495556       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-05-06 02:55:37 +0000 UTC to 2036-05-03 02:55:37 +0000 UTC (now=2026-05-06 03:07:20.495542431 +0000 UTC))"
I0506 03:07:20.495827       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4006555071/tls.crt::/tmp/serving-cert-4006555071/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1778036839\" (2026-05-06 03:07:18 +0000 UTC to 2026-05-06 03:07:19 +0000 UTC (now=2026-05-06 03:07:20.495805891 +0000 UTC))"
I0506 03:07:20.496103       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778036840\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778036840\" (2026-05-06 02:07:19 +0000 UTC to 2027-05-06 02:07:19 +0000 UTC (now=2026-05-06 03:07:20.496081609 +0000 UTC))"
I0506 03:07:20.507244       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0506 03:07:20.507257       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0506 03:07:20.507253       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0506 03:07:20.507275       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0506 03:07:20.507275       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0506 03:07:20.507283       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0506 03:07:20.507285       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0506 03:07:20.507265       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0506 03:07:20.507291       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0506 03:07:20.507296       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0506 03:07:20.507301       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0506 03:07:20.507305       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0506 03:07:20.507289       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0506 03:07:20.507314       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0506 03:07:20.507321       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0506 03:07:20.507296       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0506 03:07:20.507331       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0506 03:07:20.507339       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0506 03:07:20.507346       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0506 03:07:20.507977       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0506 03:07:20.507989       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0506 03:07:20.507994       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0506 03:07:20.507997       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0506 03:07:20.508000       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0506 03:07:20.508002       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0506 03:07:20.508041       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0506 03:07:20.508059       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0506 03:07:20.508065       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0506 03:07:20.508069       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0506 03:07:20.508072       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0506 03:07:20.508074       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0506 03:07:20.572083       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.607161       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0506 03:07:20.607175       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0506 03:07:20.607182       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0506 03:07:20.607185       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0506 03:07:20.607188       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0506 03:07:20.607191       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0506 03:07:20.607212       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.607256       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.607264       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.607289       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.607308       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0506 03:07:20.607307       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.607318       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0506 03:07:20.607324       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0506 03:07:20.607329       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0506 03:07:20.607332       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0506 03:07:20.607335       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0506 03:07:20.629299       1 configmap.go:109] updating configmap open-cluster-management-2q45svcivdm15p3pj0gf8q8sbn6f50mb/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.629581       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.648149       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.648189       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.648188       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.655110       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0506 03:07:20.663979       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.675094       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.683774       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.683812       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:20.773114       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0506 03:07:20.807886       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0506 03:07:20.807901       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0506 03:07:20.807908       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0506 03:07:20.807913       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0506 03:07:20.807918       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0506 03:07:20.807924       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0506 03:07:20.807953       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0506 03:07:20.807956       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0506 03:07:20.821173       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:21.042760       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:21.221763       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:21.437096       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:21.641078       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:21.839103       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:22.052194       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:22.230445       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:22.417628       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:22.617534       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:22.820029       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:23.019987       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:23.215382       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:23.419176       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:23.619757       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:23.819481       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:24.018436       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:24.221611       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:24.419440       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
W0506 03:07:24.617706       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0506 03:07:24.620499       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:24.820618       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:25.019960       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:25.221000       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:25.419995       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:25.619439       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0506 03:07:25.818726       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:26.023831       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:26.217537       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:26.417305       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:26.619945       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:26.818713       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:27.019224       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:27.217902       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:27.419783       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0506 03:07:27.619022       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:27.818417       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:28.018179       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:28.218049       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:28.419782       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0506 03:07:28.619512       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:28.818345       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0506 03:07:29.019165       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:29.219139       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:29.418034       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:29.620071       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:29.819771       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:30.017685       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:30.216890       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:30.419480       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:30.618467       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:30.817329       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:31.019162       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:31.217906       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:31.416019       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:31.617969       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:31.815852       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:32.031327       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:32.218010       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:32.416611       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:32.617331       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:32.816751       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:33.017836       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:33.221395       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:33.416658       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:33.618637       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:33.821548       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:34.018276       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:34.219167       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:34.418233       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:34.616504       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:34.818845       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0506 03:07:48.529690       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0506 03:07:48.539472       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0506 03:07:52.704360       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0506 03:07:52.704376       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0506 03:08:09.819569       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0506 03:08:22.622169       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0506 03:09:21.041469       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0506 03:15:52.541170       1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.245581       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.255748       1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.266610       1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.281105       1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.294078       1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.302981       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.314293       1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle
I0506 03:15:56.324350       1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0506 03:16:20.691430       1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle
I0506 03:16:33.422000       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0506 03:16:53.767614       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0506 03:16:57.440888       1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle
I0506 03:16:57.539862       1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle
I0506 03:16:57.647779       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0506 03:16:57.741788       1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle
I0506 03:16:57.841264       1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle
I0506 03:16:57.944305       1 configmap.go:109] updating configmap open-cluster-management-2q45svcivdm15p3pj0gf8q8sbn6f50mb/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.039764       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.141412       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.234818       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.333553       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.434732       1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.535922       1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.634401       1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.736306       1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle
I0506 03:16:58.955819       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0506 03:20:06.012270       1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.020305       1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.042044       1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.054977       1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.316266       1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.418472       1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.461464       1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:06.744361       1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:07.339392       1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:07.693898       1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle
I0506 03:20:12.893285       1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle
I0506 03:20:12.947016       1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.031559       1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.120306       1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.307301       1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.475083       1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.571263       1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.661050       1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.761143       1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle
I0506 03:20:13.863751       1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle
I0506 03:21:58.124240       1 configmap.go:109] updating configmap managed-tenant-xop5a/openshift-service-ca.crt with the service signing CA bundle
I0506 03:21:59.373172       1 configmap.go:109] updating configmap managed-tenant-xop5a/config-service-cabundle with the service signing CA bundle
W0506 03:27:20.774078       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"