W0504 20:39:50.856936 1 cmd.go:257] Using insecure, self-signed certificates I0504 20:39:50.857206 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777927190 cert, and key in /tmp/serving-cert-2562335453/serving-signer.crt, /tmp/serving-cert-2562335453/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777927190" is unset, resetting to 157680000000000000 years! I0504 20:39:51.799300 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0504 20:39:51.799656 1 observer_polling.go:159] Starting file observer I0504 20:39:51.799719 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0504 20:39:51.799732 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0504 20:39:51.799737 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0504 20:39:51.799741 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0504 20:39:51.828034 1 builder.go:304] service-ca-controller version - I0504 20:39:51.828747 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2562335453/tls.crt::/tmp/serving-cert-2562335453/tls.key" I0504 20:39:52.700857 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0504 20:39:52.710383 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0504 20:39:52.710402 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0504 20:39:52.710421 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0504 20:39:52.710426 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0504 20:39:52.713691 1 secure_serving.go:57] Forcing use of http/1.1 only I0504 20:39:52.713703 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0504 20:39:52.713708 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0504 20:39:52.713713 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0504 20:39:52.713717 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0504 20:39:52.713719 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0504 20:39:52.713722 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0504 20:39:52.713724 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0504 20:39:52.722258 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0504 20:39:52.722283 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0504 20:39:52.722296 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0504 20:39:52.722314 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0504 20:39:52.722333 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0504 20:39:52.722355 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0504 20:39:52.722610 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2562335453/tls.crt::/tmp/serving-cert-2562335453/tls.key" I0504 20:39:52.722778 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2562335453/tls.crt::/tmp/serving-cert-2562335453/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777927190\" (2026-05-04 20:39:50 +0000 UTC to 2026-05-04 20:39:51 +0000 UTC (now=2026-05-04 20:39:52.722749547 +0000 UTC))" I0504 20:39:52.722991 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777927192\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777927192\" (2026-05-04 19:39:51 +0000 UTC to 2027-05-04 19:39:51 +0000 UTC (now=2026-05-04 20:39:52.722970724 +0000 UTC))" I0504 20:39:52.723013 1 secure_serving.go:213] Serving securely on [::]:8443 I0504 20:39:52.723032 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0504 20:39:52.723047 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0504 20:39:52.723318 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0504 20:39:52.732541 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.732565 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.732631 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.743448 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0504 20:39:52.743557 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"7887a358-54cc-4533-9911-321599ff39e2", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9273", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-dtzgl_7e9c64a0-9227-4e44-9e61-2bcba14c9c0b became leader I0504 20:39:52.744398 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0504 20:39:52.744414 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0504 20:39:52.744401 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0504 20:39:52.744444 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0504 20:39:52.744459 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0504 20:39:52.744545 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0504 20:39:52.744853 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0504 20:39:52.745102 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0504 20:39:52.745173 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0504 20:39:52.754005 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.754989 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.757128 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.760271 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.801317 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.822319 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0504 20:39:52.822409 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0504 20:39:52.822425 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0504 20:39:52.822607 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-04 20:30:19 +0000 UTC to 2036-05-01 20:30:19 +0000 UTC (now=2026-05-04 20:39:52.822563028 +0000 UTC))" I0504 20:39:52.822844 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2562335453/tls.crt::/tmp/serving-cert-2562335453/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777927190\" (2026-05-04 20:39:50 +0000 UTC to 2026-05-04 20:39:51 +0000 UTC (now=2026-05-04 20:39:52.822817818 +0000 UTC))" I0504 20:39:52.823022 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777927192\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777927192\" (2026-05-04 19:39:51 +0000 UTC to 2027-05-04 19:39:51 +0000 UTC (now=2026-05-04 20:39:52.823008695 +0000 UTC))" I0504 20:39:52.823208 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-04 20:30:21 +0000 UTC to 2036-05-01 20:30:21 +0000 UTC (now=2026-05-04 20:39:52.823187871 +0000 UTC))" I0504 20:39:52.823242 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-04 20:30:27 +0000 UTC to 2036-05-01 20:30:27 +0000 UTC (now=2026-05-04 20:39:52.823225136 +0000 UTC))" I0504 20:39:52.823271 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-04 20:30:29 +0000 UTC to 2036-05-01 20:30:29 +0000 UTC (now=2026-05-04 20:39:52.823256482 +0000 UTC))" I0504 20:39:52.823294 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-04 20:30:32 +0000 UTC to 2036-05-01 20:30:32 +0000 UTC (now=2026-05-04 20:39:52.823281328 +0000 UTC))" I0504 20:39:52.823321 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-04 20:30:34 +0000 UTC to 2036-05-01 20:30:34 +0000 UTC (now=2026-05-04 20:39:52.823307011 +0000 UTC))" I0504 20:39:52.823344 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3b3os70c667l7uhbfrt2sq5dfhc2b8-kx-18892726ba_customer-system-admin-signer@1777926796\" [] issuer=\"\" (2026-05-04 20:33:17 +0000 UTC to 2026-05-11 20:33:18 +0000 UTC (now=2026-05-04 20:39:52.823331714 +0000 UTC))" I0504 20:39:52.823374 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q3b3os70c667l7uhbfrt2sq5dfhc2b8-kx-18892726ba_sre-system-admin-signer@1777926796\" [] issuer=\"\" (2026-05-04 20:33:16 +0000 UTC to 2026-05-11 20:33:17 +0000 UTC (now=2026-05-04 20:39:52.823364349 +0000 UTC))" I0504 20:39:52.823391 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-04 20:30:19 +0000 UTC to 2036-05-01 20:30:19 +0000 UTC (now=2026-05-04 20:39:52.823383773 +0000 UTC))" I0504 20:39:52.823584 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2562335453/tls.crt::/tmp/serving-cert-2562335453/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777927190\" (2026-05-04 20:39:50 +0000 UTC to 2026-05-04 20:39:51 +0000 UTC (now=2026-05-04 20:39:52.823573791 +0000 UTC))" I0504 20:39:52.823768 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777927192\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777927192\" (2026-05-04 19:39:51 +0000 UTC to 2027-05-04 19:39:51 +0000 UTC (now=2026-05-04 20:39:52.823757366 +0000 UTC))" I0504 20:39:52.844478 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0504 20:39:52.844500 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0504 20:39:52.844500 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0504 20:39:52.844510 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0504 20:39:52.844519 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0504 20:39:52.844527 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0504 20:39:52.844511 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0504 20:39:52.844527 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:39:52.844539 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0504 20:39:52.844577 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0504 20:39:52.844583 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0504 20:39:52.844533 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0504 20:39:52.844622 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0504 20:39:52.844567 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:39:52.844627 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0504 20:39:52.844643 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0504 20:39:52.844643 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:39:52.844659 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:39:52.844662 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0504 20:39:52.845310 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0504 20:39:52.845320 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0504 20:39:52.845338 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0504 20:39:52.845347 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0504 20:39:52.845356 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0504 20:39:52.845364 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0504 20:39:52.845370 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0504 20:39:52.845325 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0504 20:39:52.845410 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0504 20:39:52.845420 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0504 20:39:52.845427 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0504 20:39:52.845432 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0504 20:39:52.846365 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.923776 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0504 20:39:52.945246 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0504 20:39:52.945272 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0504 20:39:52.945284 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0504 20:39:52.945292 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0504 20:39:52.945297 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0504 20:39:52.945301 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0504 20:39:52.945349 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.945292 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0504 20:39:52.945367 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.945404 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.945408 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0504 20:39:52.945565 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:39:52.945405 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0504 20:39:52.945584 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0504 20:39:52.945446 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.945605 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0504 20:39:52.945611 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0504 20:39:52.945616 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0504 20:39:52.945637 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0504 20:39:52.945640 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0504 20:39:52.945455 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.945574 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:39:52.945848 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:39:52.945860 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:39:52.945866 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0504 20:39:52.959452 1 configmap.go:109] updating configmap open-cluster-management-2q3b3os70c667l7uhbfrt2sq5dfhc2b8/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.962220 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.963472 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.963538 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.964105 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.977524 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0504 20:39:52.977525 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.978053 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.978344 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:52.981604 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:53.170200 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:53.357115 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:53.580819 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:53.787829 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:53.958820 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:54.159234 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:54.358943 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:54.556970 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:54.756558 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:54.956669 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:55.156652 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:55.359378 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:55.560519 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:55.758845 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:55.955991 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:56.158421 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:56.357795 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:56.557004 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:56.757525 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:56.959627 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:57.157551 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle W0504 20:39:57.160467 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0504 20:39:57.362337 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:57.560614 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:57.757944 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:57.956880 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0504 20:39:58.158990 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:58.359343 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:58.557895 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:58.756524 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:58.958965 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:59.158737 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:59.357768 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:59.558714 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0504 20:39:59.756323 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0504 20:39:59.958318 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:00.159075 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:00.358698 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:00.558972 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:00.758425 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0504 20:40:00.956833 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:01.160506 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0504 20:40:01.359108 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:01.557584 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:01.756751 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:01.959435 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:02.160030 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:02.358768 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:02.558552 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:02.758162 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:02.958245 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:03.158105 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:03.360502 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:03.558785 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:03.756355 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:03.955502 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:04.158438 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:04.357640 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:04.555369 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:04.757247 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:04.956952 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:05.158781 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:05.358853 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:05.555479 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:05.756995 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:05.957265 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:06.156329 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:06.360829 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:06.557879 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:06.756537 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:06.957425 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:07.156509 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0504 20:40:14.365682 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0504 20:40:14.379627 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0504 20:40:19.576556 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0504 20:40:19.577990 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0504 20:40:48.359939 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0504 20:40:49.852185 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0504 20:44:06.960627 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0504 20:46:12.830411 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.771972 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.797072 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.818176 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.831148 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.841923 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.855396 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.862664 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:16.880135 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:44.086799 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0504 20:46:55.812775 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0504 20:47:14.662161 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0504 20:47:18.397294 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0504 20:47:18.489286 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:18.589519 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0504 20:47:18.690890 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:18.790293 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0504 20:47:18.890518 1 configmap.go:109] updating configmap open-cluster-management-2q3b3os70c667l7uhbfrt2sq5dfhc2b8/config-service-cabundle with the service signing CA bundle I0504 20:47:18.990369 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0504 20:47:19.089784 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:19.191813 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0504 20:47:19.289273 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0504 20:47:19.390892 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0504 20:47:19.489854 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0504 20:47:19.589939 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0504 20:47:19.691337 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0504 20:47:19.814283 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0504 20:50:55.571795 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:55.583675 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:55.597702 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:55.611674 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:55.930196 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:56.090991 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:56.155864 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:56.221888 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:56.546474 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0504 20:50:56.640808 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0504 20:51:00.024241 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0504 20:51:00.088958 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0504 20:51:00.179313 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0504 20:51:00.234710 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0504 20:51:00.306450 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0504 20:51:00.406124 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0504 20:51:02.503974 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0504 20:51:02.569529 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0504 20:51:02.667790 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0504 20:51:02.773121 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0504 20:59:10.574172 1 configmap.go:109] updating configmap managed-tenant-8thod/openshift-service-ca.crt with the service signing CA bundle I0504 20:59:11.910988 1 configmap.go:109] updating configmap managed-tenant-8thod/config-service-cabundle with the service signing CA bundle W0504 20:59:52.924389 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" W0504 21:19:52.925711 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"