W0420 11:39:28.124968 1 cmd.go:257] Using insecure, self-signed certificates I0420 11:39:28.125190 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776685168 cert, and key in /tmp/serving-cert-4255788522/serving-signer.crt, /tmp/serving-cert-4255788522/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1776685168" is unset, resetting to 157680000000000000 years! I0420 11:39:28.321058 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0420 11:39:28.321389 1 observer_polling.go:159] Starting file observer I0420 11:39:28.321459 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0420 11:39:28.321472 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0420 11:39:28.321477 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0420 11:39:28.321481 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0420 11:39:28.343904 1 builder.go:304] service-ca-controller version - I0420 11:39:28.345848 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-4255788522/tls.crt::/tmp/serving-cert-4255788522/tls.key" I0420 11:39:29.226521 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0420 11:39:29.232243 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0420 11:39:29.232257 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0420 11:39:29.232275 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0420 11:39:29.232283 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0420 11:39:29.235573 1 secure_serving.go:57] Forcing use of http/1.1 only I0420 11:39:29.235588 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0420 11:39:29.235591 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0420 11:39:29.235604 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0420 11:39:29.235608 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0420 11:39:29.235611 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0420 11:39:29.235615 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0420 11:39:29.235619 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0420 11:39:29.241797 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0420 11:39:29.241756 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0420 11:39:29.241862 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0420 11:39:29.241885 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0420 11:39:29.242150 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-4255788522/tls.crt::/tmp/serving-cert-4255788522/tls.key" I0420 11:39:29.241830 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0420 11:39:29.242764 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0420 11:39:29.242951 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4255788522/tls.crt::/tmp/serving-cert-4255788522/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776685168\" (2026-04-20 11:39:27 +0000 UTC to 2026-04-20 11:39:28 +0000 UTC (now=2026-04-20 11:39:29.242918293 +0000 UTC))" I0420 11:39:29.243259 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776685169\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776685168\" (2026-04-20 10:39:28 +0000 UTC to 2027-04-20 10:39:28 +0000 UTC (now=2026-04-20 11:39:29.243233717 +0000 UTC))" I0420 11:39:29.243284 1 secure_serving.go:213] Serving securely on [::]:8443 I0420 11:39:29.243307 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0420 11:39:29.243325 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0420 11:39:29.243606 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0420 11:39:29.244708 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.245744 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.245748 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.257505 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0420 11:39:29.257555 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"cc5b6ff4-04c0-4572-8d5c-7fe9bce879d2", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9704", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-glds8_216b40c4-4b00-47ad-8f69-c0a909e828fd became leader I0420 11:39:29.258653 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0420 11:39:29.258664 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0420 11:39:29.258654 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0420 11:39:29.258679 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0420 11:39:29.258683 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0420 11:39:29.258764 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0420 11:39:29.259086 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0420 11:39:29.259318 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0420 11:39:29.259341 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0420 11:39:29.266342 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.266841 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.266976 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.267528 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.312570 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.342052 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0420 11:39:29.342057 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0420 11:39:29.342502 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-20 11:29:58 +0000 UTC to 2036-04-17 11:29:58 +0000 UTC (now=2026-04-20 11:39:29.34248172 +0000 UTC))" I0420 11:39:29.342526 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-20 11:30:01 +0000 UTC to 2036-04-17 11:30:01 +0000 UTC (now=2026-04-20 11:39:29.342516642 +0000 UTC))" I0420 11:39:29.342544 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-20 11:30:05 +0000 UTC to 2036-04-17 11:30:05 +0000 UTC (now=2026-04-20 11:39:29.34253635 +0000 UTC))" I0420 11:39:29.342561 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-20 11:30:06 +0000 UTC to 2036-04-17 11:30:06 +0000 UTC (now=2026-04-20 11:39:29.342552963 +0000 UTC))" I0420 11:39:29.342575 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-20 11:30:10 +0000 UTC to 2036-04-17 11:30:10 +0000 UTC (now=2026-04-20 11:39:29.342567506 +0000 UTC))" I0420 11:39:29.342590 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtcr8ssi9i0be4v4c4mp3tfmtq8os-kx-fd289a44e0_customer-system-admin-signer@1776684707\" [] issuer=\"\" (2026-04-20 11:31:47 +0000 UTC to 2026-04-27 11:31:48 +0000 UTC (now=2026-04-20 11:39:29.342581352 +0000 UTC))" I0420 11:39:29.342608 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtcr8ssi9i0be4v4c4mp3tfmtq8os-kx-fd289a44e0_sre-system-admin-signer@1776684707\" [] issuer=\"\" (2026-04-20 11:31:48 +0000 UTC to 2026-04-27 11:31:49 +0000 UTC (now=2026-04-20 11:39:29.342599065 +0000 UTC))" I0420 11:39:29.342805 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4255788522/tls.crt::/tmp/serving-cert-4255788522/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776685168\" (2026-04-20 11:39:27 +0000 UTC to 2026-04-20 11:39:28 +0000 UTC (now=2026-04-20 11:39:29.342791832 +0000 UTC))" I0420 11:39:29.342957 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776685169\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776685168\" (2026-04-20 10:39:28 +0000 UTC to 2027-04-20 10:39:28 +0000 UTC (now=2026-04-20 11:39:29.34294655 +0000 UTC))" I0420 11:39:29.342978 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0420 11:39:29.343148 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-20 11:29:58 +0000 UTC to 2036-04-17 11:29:58 +0000 UTC (now=2026-04-20 11:39:29.343136698 +0000 UTC))" I0420 11:39:29.343167 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-20 11:30:01 +0000 UTC to 2036-04-17 11:30:01 +0000 UTC (now=2026-04-20 11:39:29.343158117 +0000 UTC))" I0420 11:39:29.343182 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-20 11:30:05 +0000 UTC to 2036-04-17 11:30:05 +0000 UTC (now=2026-04-20 11:39:29.343174501 +0000 UTC))" I0420 11:39:29.343196 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-20 11:30:06 +0000 UTC to 2036-04-17 11:30:06 +0000 UTC (now=2026-04-20 11:39:29.343188449 +0000 UTC))" I0420 11:39:29.343225 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-20 11:30:10 +0000 UTC to 2036-04-17 11:30:10 +0000 UTC (now=2026-04-20 11:39:29.343202301 +0000 UTC))" I0420 11:39:29.343257 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtcr8ssi9i0be4v4c4mp3tfmtq8os-kx-fd289a44e0_customer-system-admin-signer@1776684707\" [] issuer=\"\" (2026-04-20 11:31:47 +0000 UTC to 2026-04-27 11:31:48 +0000 UTC (now=2026-04-20 11:39:29.343247598 +0000 UTC))" I0420 11:39:29.343274 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pprtcr8ssi9i0be4v4c4mp3tfmtq8os-kx-fd289a44e0_sre-system-admin-signer@1776684707\" [] issuer=\"\" (2026-04-20 11:31:48 +0000 UTC to 2026-04-27 11:31:49 +0000 UTC (now=2026-04-20 11:39:29.343264985 +0000 UTC))" I0420 11:39:29.343297 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-20 11:29:55 +0000 UTC to 2036-04-17 11:29:55 +0000 UTC (now=2026-04-20 11:39:29.343282894 +0000 UTC))" I0420 11:39:29.343458 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-4255788522/tls.crt::/tmp/serving-cert-4255788522/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776685168\" (2026-04-20 11:39:27 +0000 UTC to 2026-04-20 11:39:28 +0000 UTC (now=2026-04-20 11:39:29.343448142 +0000 UTC))" I0420 11:39:29.343628 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776685169\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776685168\" (2026-04-20 10:39:28 +0000 UTC to 2027-04-20 10:39:28 +0000 UTC (now=2026-04-20 11:39:29.343617622 +0000 UTC))" I0420 11:39:29.357423 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.358714 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0420 11:39:29.358726 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0420 11:39:29.358724 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0420 11:39:29.358738 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0420 11:39:29.358742 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0420 11:39:29.358750 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0420 11:39:29.358755 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0420 11:39:29.358759 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0420 11:39:29.358762 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0420 11:39:29.358763 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.358772 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0420 11:39:29.358784 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0420 11:39:29.358789 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0420 11:39:29.358793 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0420 11:39:29.358743 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0420 11:39:29.358807 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0420 11:39:29.358817 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0420 11:39:29.358822 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0420 11:39:29.358731 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0420 11:39:29.358832 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.358841 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.358839 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0420 11:39:29.358851 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0420 11:39:29.358856 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0420 11:39:29.358796 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0420 11:39:29.358874 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0420 11:39:29.358755 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0420 11:39:29.358887 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0420 11:39:29.358893 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0420 11:39:29.358896 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0420 11:39:29.358899 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0420 11:39:29.358902 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0420 11:39:29.358881 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0420 11:39:29.358924 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.358926 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.358765 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0420 11:39:29.359446 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0420 11:39:29.359458 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0420 11:39:29.359468 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0420 11:39:29.359474 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0420 11:39:29.359479 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0420 11:39:29.359484 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0420 11:39:29.359489 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0420 11:39:29.359458 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0420 11:39:29.359565 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0420 11:39:29.359572 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0420 11:39:29.359576 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0420 11:39:29.359578 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0420 11:39:29.371943 1 configmap.go:109] updating configmap open-cluster-management-2pprtcr8ssi9i0be4v4c4mp3tfmtq8os/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.377974 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.378341 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.379509 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.380734 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.385068 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0420 11:39:29.389560 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.393073 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.394122 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.433493 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0420 11:39:29.459459 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0420 11:39:29.459476 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0420 11:39:29.459482 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0420 11:39:29.459486 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0420 11:39:29.459489 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0420 11:39:29.459493 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0420 11:39:29.459515 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0420 11:39:29.459543 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0420 11:39:29.468942 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.673971 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:29.871286 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:30.118055 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:30.390477 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:30.472060 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:30.676103 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:30.870688 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:31.072707 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:31.270667 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:31.473045 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:31.670030 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:31.870195 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:32.071944 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:32.270698 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:32.472065 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:32.669564 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:32.873131 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:33.071236 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:33.269740 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:33.471829 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:33.672128 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:33.870104 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle W0420 11:39:34.069798 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0420 11:39:34.071653 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:34.270982 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:34.471376 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0420 11:39:34.670786 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:34.871786 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:35.071317 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:35.272593 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:35.469907 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:35.672606 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:35.872177 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:36.072978 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:36.270116 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0420 11:39:36.472266 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:36.671470 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:36.870424 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:37.072180 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:37.270225 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0420 11:39:37.471104 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:37.669162 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0420 11:39:37.871575 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:38.070538 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:38.279137 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:38.472081 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:38.671757 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:38.871560 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:39.070622 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:39.269671 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:39.471459 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:39.669707 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:39.870747 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:40.071072 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:40.268556 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:40.469043 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:40.669729 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:40.870246 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:41.078148 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:41.275391 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:41.468531 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:41.670008 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:41.868167 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:42.070273 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:42.269616 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:42.467941 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:42.669431 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:42.871217 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:43.075355 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:43.278923 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:43.470881 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:43.669765 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0420 11:39:48.475939 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0420 11:39:48.491146 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0420 11:39:54.679405 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0420 11:39:54.679416 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0420 11:40:14.172856 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0420 11:40:24.567363 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0420 11:43:41.801949 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0420 11:46:01.209348 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.205894 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.213796 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.230596 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.244710 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.261383 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.285438 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.309943 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:05.324298 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:27.670644 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0420 11:46:56.159093 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0420 11:47:02.726308 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0420 11:47:06.409051 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0420 11:47:06.504848 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0420 11:47:06.608598 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0420 11:47:06.715787 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0420 11:47:06.803360 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0420 11:47:06.903532 1 configmap.go:109] updating configmap open-cluster-management-2pprtcr8ssi9i0be4v4c4mp3tfmtq8os/config-service-cabundle with the service signing CA bundle I0420 11:47:07.003032 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0420 11:47:07.102476 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0420 11:47:07.202498 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0420 11:47:07.302513 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0420 11:47:07.402493 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0420 11:47:07.502564 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0420 11:47:07.616002 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0420 11:47:07.731492 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0420 11:47:08.092034 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0420 11:50:33.113900 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.125877 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.135470 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.149200 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.334683 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.484048 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.619083 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.671404 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:33.803949 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0420 11:50:37.278764 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0420 11:50:37.342477 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0420 11:50:37.443853 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0420 11:50:37.547330 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0420 11:50:37.640734 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0420 11:50:37.740291 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0420 11:50:37.845065 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0420 11:50:37.950936 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0420 11:50:38.043046 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0420 11:52:34.050946 1 configmap.go:109] updating configmap default-managed-tenant-s337p/openshift-service-ca.crt with the service signing CA bundle I0420 11:52:35.267046 1 configmap.go:109] updating configmap default-managed-tenant-s337p/config-service-cabundle with the service signing CA bundle W0420 11:59:29.434811 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"