W0425 11:47:57.350317       1 cmd.go:257] Using insecure, self-signed certificates
I0425 11:47:57.355112       1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777117677 cert, and key in /tmp/serving-cert-4193235841/serving-signer.crt, /tmp/serving-cert-4193235841/serving-signer.key
Validity period of the certificate for "service-ca-controller-signer@1777117677" is unset, resetting to 157680000000000000 years!
I0425 11:47:58.183854       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0425 11:47:58.184430       1 observer_polling.go:159] Starting file observer
I0425 11:47:58.184497       1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false
I0425 11:47:58.184510       1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false
I0425 11:47:58.184515       1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false
I0425 11:47:58.184520       1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false
I0425 11:47:58.210094       1 builder.go:304] service-ca-controller version -
I0425 11:47:58.210773       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4193235841/tls.crt::/tmp/serving-cert-4193235841/tls.key"
I0425 11:47:58.801315       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0425 11:47:58.807034       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0425 11:47:58.807049       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0425 11:47:58.807070       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0425 11:47:58.807075       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0425 11:47:58.811028       1 secure_serving.go:57] Forcing use of http/1.1 only
W0425 11:47:58.811056       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
W0425 11:47:58.811064       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
W0425 11:47:58.811071       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected.
W0425 11:47:58.811074       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected.
W0425 11:47:58.811079       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected.
W0425 11:47:58.811083       1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected.
I0425 11:47:58.811035       1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0425 11:47:58.815322       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0425 11:47:58.815332       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0425 11:47:58.815350       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0425 11:47:58.815368       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0425 11:47:58.815357       1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0425 11:47:58.815359       1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController
I0425 11:47:58.815668       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4193235841/tls.crt::/tmp/serving-cert-4193235841/tls.key"
I0425 11:47:58.815787       1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock...
I0425 11:47:58.815816       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4193235841/tls.crt::/tmp/serving-cert-4193235841/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777117677\" (2026-04-25 11:47:57 +0000 UTC to 2026-04-25 11:47:58 +0000 UTC (now=2026-04-25 11:47:58.815793859 +0000 UTC))"
I0425 11:47:58.815994       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777117678\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777117678\" (2026-04-25 10:47:58 +0000 UTC to 2027-04-25 10:47:58 +0000 UTC (now=2026-04-25 11:47:58.815977576 +0000 UTC))"
I0425 11:47:58.816014       1 secure_serving.go:213] Serving securely on [::]:8443
I0425 11:47:58.816034       1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated
I0425 11:47:58.816046       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0425 11:47:58.818811       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.818852       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.818949       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.826050       1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock
I0425 11:47:58.826119       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"bac26e2e-e3da-4b61-a42d-b566080d00a5", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9636", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-zggh6_2459c985-e42b-41f3-ade3-85c22ec86832 became leader
I0425 11:47:58.828476       1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector
I0425 11:47:58.828504       1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector
I0425 11:47:58.828527       1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector
I0425 11:47:58.828543       1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector
I0425 11:47:58.828560       1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector
I0425 11:47:58.828670       1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector
I0425 11:47:58.828939       1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s
I0425 11:47:58.829175       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController
I0425 11:47:58.829238       1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController
I0425 11:47:58.831319       1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.831516       1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.833047       1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.833681       1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.890498       1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:58.915468       1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController
I0425 11:47:58.915489       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
I0425 11:47:58.915474       1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
I0425 11:47:58.915744       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:41 +0000 UTC to 2036-04-22 11:38:41 +0000 UTC (now=2026-04-25 11:47:58.915714306 +0000 UTC))"
I0425 11:47:58.915959       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4193235841/tls.crt::/tmp/serving-cert-4193235841/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777117677\" (2026-04-25 11:47:57 +0000 UTC to 2026-04-25 11:47:58 +0000 UTC (now=2026-04-25 11:47:58.91593938 +0000 UTC))"
I0425 11:47:58.916136       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777117678\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777117678\" (2026-04-25 10:47:58 +0000 UTC to 2027-04-25 10:47:58 +0000 UTC (now=2026-04-25 11:47:58.916122337 +0000 UTC))"
I0425 11:47:58.916294       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:43 +0000 UTC to 2036-04-22 11:38:43 +0000 UTC (now=2026-04-25 11:47:58.916281796 +0000 UTC))"
I0425 11:47:58.916322       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:49 +0000 UTC to 2036-04-22 11:38:49 +0000 UTC (now=2026-04-25 11:47:58.916305168 +0000 UTC))"
I0425 11:47:58.916338       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:50 +0000 UTC to 2036-04-22 11:38:50 +0000 UTC (now=2026-04-25 11:47:58.916330744 +0000 UTC))"
I0425 11:47:58.916356       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:52 +0000 UTC to 2036-04-22 11:38:52 +0000 UTC (now=2026-04-25 11:47:58.916348183 +0000 UTC))"
I0425 11:47:58.916372       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:56 +0000 UTC to 2036-04-22 11:38:56 +0000 UTC (now=2026-04-25 11:47:58.916364716 +0000 UTC))"
I0425 11:47:58.916397       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pt5go36ks0rjgb6amjjn5edou29lsjs-kx-c26eaf2d8c_customer-system-admin-signer@1777117238\" [] issuer=\"<self>\" (2026-04-25 11:40:38 +0000 UTC to 2026-05-02 11:40:39 +0000 UTC (now=2026-04-25 11:47:58.916387361 +0000 UTC))"
I0425 11:47:58.916422       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pt5go36ks0rjgb6amjjn5edou29lsjs-kx-c26eaf2d8c_sre-system-admin-signer@1777117238\" [] issuer=\"<self>\" (2026-04-25 11:40:37 +0000 UTC to 2026-05-02 11:40:38 +0000 UTC (now=2026-04-25 11:47:58.91640732 +0000 UTC))"
I0425 11:47:58.916442       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-25 11:38:41 +0000 UTC to 2036-04-22 11:38:41 +0000 UTC (now=2026-04-25 11:47:58.91643424 +0000 UTC))"
I0425 11:47:58.916614       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4193235841/tls.crt::/tmp/serving-cert-4193235841/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777117677\" (2026-04-25 11:47:57 +0000 UTC to 2026-04-25 11:47:58 +0000 UTC (now=2026-04-25 11:47:58.916604193 +0000 UTC))"
I0425 11:47:58.916831       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777117678\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777117678\" (2026-04-25 10:47:58 +0000 UTC to 2027-04-25 10:47:58 +0000 UTC (now=2026-04-25 11:47:58.916803905 +0000 UTC))"
I0425 11:47:58.929298       1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector 
I0425 11:47:58.929318       1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ...
I0425 11:47:58.929327       1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ...
I0425 11:47:58.929330       1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ...
I0425 11:47:58.929333       1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ...
I0425 11:47:58.929336       1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ...
I0425 11:47:58.929383       1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector 
I0425 11:47:58.929392       1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ...
I0425 11:47:58.929398       1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ...
I0425 11:47:58.929396       1 base_controller.go:82] Caches are synced for ServiceServingCertController 
I0425 11:47:58.929410       1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ...
I0425 11:47:58.929403       1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ...
I0425 11:47:58.929415       1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ...
I0425 11:47:58.929418       1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ...
I0425 11:47:58.929424       1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ...
I0425 11:47:58.929428       1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController 
I0425 11:47:58.929419       1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ...
I0425 11:47:58.929439       1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ...
I0425 11:47:58.929443       1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ...
I0425 11:47:58.929445       1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ...
I0425 11:47:58.929452       1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ...
I0425 11:47:58.929430       1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector 
I0425 11:47:58.929447       1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ...
I0425 11:47:58.929470       1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ...
I0425 11:47:58.929478       1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ...
I0425 11:47:58.929458       1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ...
I0425 11:47:58.929485       1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ...
I0425 11:47:58.929490       1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ...
I0425 11:47:58.929495       1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ...
I0425 11:47:58.929490       1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ...
I0425 11:47:58.929513       1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle
I0425 11:47:58.952440       1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:59.028974       1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector 
I0425 11:47:59.028992       1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector 
I0425 11:47:59.029010       1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0425 11:47:59.029014       1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ...
I0425 11:47:59.029023       1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0425 11:47:59.029030       1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0425 11:47:59.029035       1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0425 11:47:59.029039       1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ...
I0425 11:47:59.029025       1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ...
I0425 11:47:59.029058       1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.029071       1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251
I0425 11:47:59.029071       1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ...
I0425 11:47:59.029104       1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.029111       1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ...
I0425 11:47:59.029123       1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ...
I0425 11:47:59.029147       1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.029211       1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.029250       1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.055779       1 configmap.go:109] updating configmap open-cluster-management-2pt5go36ks0rjgb6amjjn5edou29lsjs/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.055907       1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.082738       1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.082754       1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.082786       1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.082862       1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle
I0425 11:47:59.082892       1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.110205       1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.110254       1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.112373       1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.129424       1 base_controller.go:82] Caches are synced for CRDCABundleInjector 
I0425 11:47:59.129440       1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ...
I0425 11:47:59.129448       1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ...
I0425 11:47:59.129454       1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ...
I0425 11:47:59.129462       1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ...
I0425 11:47:59.129466       1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ...
I0425 11:47:59.129500       1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle
W0425 11:47:59.129517       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"
I0425 11:47:59.247287       1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.443416       1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.641075       1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle
I0425 11:47:59.842350       1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:00.041873       1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:00.252403       1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:00.441797       1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:00.641551       1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:00.842466       1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:01.041721       1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:01.241418       1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:01.443921       1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:01.640439       1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:01.843205       1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:02.041385       1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:02.241694       1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:02.440218       1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:02.641267       1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:02.841753       1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:03.039933       1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle
W0425 11:48:03.241625       1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead
I0425 11:48:03.241684       1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:03.443018       1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:03.639685       1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:03.841639       1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:04.041710       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle
I0425 11:48:04.239492       1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:04.439804       1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:04.642340       1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:04.838856       1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:05.043302       1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:05.243211       1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:05.441518       1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:05.641188       1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:05.842132       1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle
I0425 11:48:06.040912       1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:06.241370       1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:06.442514       1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:06.640292       1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:06.840073       1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle
I0425 11:48:07.039756       1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:07.241620       1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle
I0425 11:48:07.443807       1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:07.639744       1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:07.842525       1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:08.045340       1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:08.242376       1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:08.441909       1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:08.641928       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:08.841986       1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:09.040927       1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:09.240125       1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:09.438684       1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:09.642304       1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:09.837397       1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:10.037552       1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:10.243228       1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:10.443528       1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:10.638034       1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:10.840700       1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:11.038918       1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:11.239622       1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:11.439036       1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:11.640804       1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:11.837604       1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:12.038135       1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:12.240404       1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:12.437241       1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:12.637684       1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:12.839590       1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:13.039836       1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:13.237532       1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle
I0425 11:48:22.667153       1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle
I0425 11:48:23.202795       1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle
I0425 11:48:23.214911       1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle
I0425 11:48:35.393276       1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle
I0425 11:48:35.398336       1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle
I0425 11:49:06.302743       1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle
I0425 11:50:03.876859       1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle
I0425 11:55:47.320352       1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.116948       1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.133803       1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.150695       1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.162147       1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.170864       1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.181881       1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.196770       1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:55:51.206523       1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle
I0425 11:56:15.207538       1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle
I0425 11:56:34.841154       1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle
I0425 11:56:54.953889       1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle
I0425 11:56:58.652000       1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle
I0425 11:56:58.751886       1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle
I0425 11:56:58.845600       1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle
I0425 11:56:58.950912       1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.049755       1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.155683       1 configmap.go:109] updating configmap open-cluster-management-2pt5go36ks0rjgb6amjjn5edou29lsjs/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.246691       1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.347118       1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.447141       1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.549954       1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.650781       1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.748556       1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.847687       1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle
I0425 11:56:59.947301       1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle
I0425 11:57:00.091354       1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle
I0425 12:00:31.193631       1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.200918       1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.213441       1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.227668       1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.554008       1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.739200       1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.776317       1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:31.854299       1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:32.699044       1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:32.775403       1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle
I0425 12:00:32.805544       1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle
I0425 12:00:32.847980       1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle
I0425 12:00:32.924192       1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle
I0425 12:00:33.019007       1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle
I0425 12:00:35.648345       1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle
I0425 12:00:35.728466       1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle
I0425 12:00:35.809127       1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle
I0425 12:00:35.908183       1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle
I0425 12:00:36.009991       1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle
I0425 12:00:36.119684       1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle
I0425 12:02:34.386250       1 configmap.go:109] updating configmap default-managed-tenant-q3nqj/openshift-service-ca.crt with the service signing CA bundle
I0425 12:02:35.815853       1 configmap.go:109] updating configmap default-managed-tenant-q3nqj/config-service-cabundle with the service signing CA bundle
W0425 12:07:59.030616       1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"