W0521 19:41:26.274934 1 cmd.go:257] Using insecure, self-signed certificates I0521 19:41:26.275121 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1779392486 cert, and key in /tmp/serving-cert-1097271784/serving-signer.crt, /tmp/serving-cert-1097271784/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1779392486" is unset, resetting to 157680000000000000 years! I0521 19:41:26.971041 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0521 19:41:26.971350 1 observer_polling.go:159] Starting file observer I0521 19:41:26.971424 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0521 19:41:26.971438 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0521 19:41:26.971443 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0521 19:41:26.971447 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0521 19:41:26.999171 1 builder.go:304] service-ca-controller version - I0521 19:41:26.999791 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1097271784/tls.crt::/tmp/serving-cert-1097271784/tls.key" I0521 19:41:27.951603 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0521 19:41:27.958239 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0521 19:41:27.958253 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0521 19:41:27.958270 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0521 19:41:27.958275 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0521 19:41:27.961343 1 secure_serving.go:57] Forcing use of http/1.1 only I0521 19:41:27.961355 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0521 19:41:27.961379 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0521 19:41:27.961383 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0521 19:41:27.961388 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0521 19:41:27.961391 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0521 19:41:27.961394 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0521 19:41:27.961396 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0521 19:41:27.968060 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0521 19:41:27.968082 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0521 19:41:27.968098 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0521 19:41:27.968094 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0521 19:41:27.968096 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1097271784/tls.crt::/tmp/serving-cert-1097271784/tls.key" I0521 19:41:27.968130 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0521 19:41:27.968102 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0521 19:41:27.968113 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0521 19:41:27.968433 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1097271784/tls.crt::/tmp/serving-cert-1097271784/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1779392486\" (2026-05-21 19:41:25 +0000 UTC to 2026-05-21 19:41:26 +0000 UTC (now=2026-05-21 19:41:27.968384888 +0000 UTC))" I0521 19:41:27.968731 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1779392487\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1779392487\" (2026-05-21 18:41:26 +0000 UTC to 2027-05-21 18:41:26 +0000 UTC (now=2026-05-21 19:41:27.968699597 +0000 UTC))" I0521 19:41:27.968782 1 secure_serving.go:213] Serving securely on [::]:8443 I0521 19:41:27.968785 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0521 19:41:27.969082 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0521 19:41:27.972004 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:27.972084 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:27.972530 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:27.982106 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0521 19:41:27.982161 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"ec378f6d-6ece-42f8-9ff8-af9583b5d834", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9479", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-bcxvb_6dee2ad6-9778-4f75-b14b-d4affa427472 became leader I0521 19:41:27.983028 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0521 19:41:27.983036 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0521 19:41:27.983048 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0521 19:41:27.983071 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0521 19:41:27.983084 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0521 19:41:27.983164 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0521 19:41:27.983469 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0521 19:41:27.983678 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0521 19:41:27.983687 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0521 19:41:27.989809 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:27.993520 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:27.993840 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:27.993930 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:28.035415 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:28.069002 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0521 19:41:28.069016 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0521 19:41:28.069026 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0521 19:41:28.069191 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-21 19:32:01 +0000 UTC to 2036-05-18 19:32:01 +0000 UTC (now=2026-05-21 19:41:28.069166392 +0000 UTC))" I0521 19:41:28.069404 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1097271784/tls.crt::/tmp/serving-cert-1097271784/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1779392486\" (2026-05-21 19:41:25 +0000 UTC to 2026-05-21 19:41:26 +0000 UTC (now=2026-05-21 19:41:28.069391625 +0000 UTC))" I0521 19:41:28.069562 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1779392487\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1779392487\" (2026-05-21 18:41:26 +0000 UTC to 2027-05-21 18:41:26 +0000 UTC (now=2026-05-21 19:41:28.069550947 +0000 UTC))" I0521 19:41:28.069695 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-21 19:32:04 +0000 UTC to 2036-05-18 19:32:04 +0000 UTC (now=2026-05-21 19:41:28.069685303 +0000 UTC))" I0521 19:41:28.069715 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-21 19:32:08 +0000 UTC to 2036-05-18 19:32:08 +0000 UTC (now=2026-05-21 19:41:28.069706042 +0000 UTC))" I0521 19:41:28.069734 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-21 19:32:10 +0000 UTC to 2036-05-18 19:32:10 +0000 UTC (now=2026-05-21 19:41:28.069722612 +0000 UTC))" I0521 19:41:28.069751 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-21 19:32:13 +0000 UTC to 2036-05-18 19:32:13 +0000 UTC (now=2026-05-21 19:41:28.069743438 +0000 UTC))" I0521 19:41:28.069765 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-21 19:32:17 +0000 UTC to 2036-05-18 19:32:17 +0000 UTC (now=2026-05-21 19:41:28.069757277 +0000 UTC))" I0521 19:41:28.069783 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2qegovcgb34vgjgrmsm5lc08sjlrclho-kx-f7f5605795_customer-system-admin-signer@1779392048\" [] issuer=\"\" (2026-05-21 19:34:10 +0000 UTC to 2026-05-28 19:34:11 +0000 UTC (now=2026-05-21 19:41:28.069773781 +0000 UTC))" I0521 19:41:28.069803 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2qegovcgb34vgjgrmsm5lc08sjlrclho-kx-f7f5605795_sre-system-admin-signer@1779392048\" [] issuer=\"\" (2026-05-21 19:34:09 +0000 UTC to 2026-05-28 19:34:10 +0000 UTC (now=2026-05-21 19:41:28.069790523 +0000 UTC))" I0521 19:41:28.069828 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-21 19:32:01 +0000 UTC to 2036-05-18 19:32:01 +0000 UTC (now=2026-05-21 19:41:28.069815657 +0000 UTC))" I0521 19:41:28.070063 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1097271784/tls.crt::/tmp/serving-cert-1097271784/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1779392486\" (2026-05-21 19:41:25 +0000 UTC to 2026-05-21 19:41:26 +0000 UTC (now=2026-05-21 19:41:28.070050382 +0000 UTC))" I0521 19:41:28.070290 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1779392487\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1779392487\" (2026-05-21 18:41:26 +0000 UTC to 2027-05-21 18:41:26 +0000 UTC (now=2026-05-21 19:41:28.070268648 +0000 UTC))" I0521 19:41:28.083452 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0521 19:41:28.083457 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0521 19:41:28.083463 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:41:28.083468 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0521 19:41:28.083476 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0521 19:41:28.083470 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:41:28.083484 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0521 19:41:28.083493 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0521 19:41:28.083498 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0521 19:41:28.083502 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0521 19:41:28.083489 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:41:28.083509 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:41:28.083508 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0521 19:41:28.083481 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0521 19:41:28.083504 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0521 19:41:28.083521 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0521 19:41:28.083523 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0521 19:41:28.083526 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0521 19:41:28.083513 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0521 19:41:28.083708 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0521 19:41:28.083724 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0521 19:41:28.083731 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0521 19:41:28.083736 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0521 19:41:28.083739 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0521 19:41:28.083742 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0521 19:41:28.083745 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0521 19:41:28.083723 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0521 19:41:28.083776 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0521 19:41:28.083779 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0521 19:41:28.083783 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0521 19:41:28.083786 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0521 19:41:28.106605 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:28.183811 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0521 19:41:28.183836 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:41:28.183847 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:41:28.183851 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:41:28.183854 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:41:28.183857 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0521 19:41:28.183816 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0521 19:41:28.183875 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0521 19:41:28.183878 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0521 19:41:28.183881 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0521 19:41:28.183884 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0521 19:41:28.183887 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0521 19:41:28.183906 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.183927 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.183934 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.183959 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.184002 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.201039 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0521 19:41:28.203896 1 configmap.go:109] updating configmap open-cluster-management-2qegovcgb34vgjgrmsm5lc08sjlrclho/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.210406 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.215011 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.215063 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.217993 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.228341 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0521 19:41:28.237269 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.237413 1 configmap.go:109] updating configmap openshift-backplane-ai-agent/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.240602 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.246483 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.283081 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0521 19:41:28.283095 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0521 19:41:28.283104 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0521 19:41:28.283109 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0521 19:41:28.283114 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0521 19:41:28.283118 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0521 19:41:28.283150 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0521 19:41:28.283152 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0521 19:41:28.404568 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.601324 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.797025 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:28.999404 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:29.198669 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:29.397197 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:29.594882 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:29.802959 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:29.996993 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:30.212442 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:30.402880 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:30.597794 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:30.797957 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:30.996676 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:31.197635 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:31.398570 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:31.596874 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:31.794764 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:32.007039 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:32.198064 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:32.404027 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:32.597002 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:32.800514 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:32.996806 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:33.198586 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:33.398341 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0521 19:41:33.596179 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:33.796534 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:34.001689 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:34.197607 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:34.395954 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:34.599139 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:34.797278 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:34.997854 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:35.198166 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0521 19:41:35.396045 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:35.596500 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:35.799087 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:35.997564 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:36.197484 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0521 19:41:36.397564 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:36.598066 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0521 19:41:36.797333 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.004124 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.199234 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.399823 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.600060 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.798219 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:37.998494 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:38.198863 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:38.397956 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:38.597417 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:38.796281 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:38.996767 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:39.195953 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:39.395331 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:39.599479 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:39.796893 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:39.996060 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:40.196062 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:40.396461 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:40.595236 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:40.796231 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:40.996338 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:41.196207 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:41.405525 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:41.595027 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:41.795236 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:41.996430 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:42.195703 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:42.398809 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:42.597209 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0521 19:41:56.043328 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0521 19:41:56.947229 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0521 19:41:56.962038 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0521 19:42:01.158793 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0521 19:42:01.158845 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0521 19:42:34.396882 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0521 19:45:48.499735 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0521 19:50:52.336920 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.099387 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.113304 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.131530 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.154393 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.173277 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.210326 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.263302 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0521 19:50:56.290305 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0521 19:51:22.971854 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0521 19:51:42.904660 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0521 19:51:49.347162 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0521 19:51:53.042607 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0521 19:51:53.143671 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0521 19:51:53.232827 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0521 19:51:53.335625 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0521 19:51:53.432135 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0521 19:51:53.532506 1 configmap.go:109] updating configmap open-cluster-management-2qegovcgb34vgjgrmsm5lc08sjlrclho/config-service-cabundle with the service signing CA bundle I0521 19:51:53.633601 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0521 19:51:53.731853 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0521 19:51:53.835981 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0521 19:51:53.932642 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0521 19:51:54.034042 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0521 19:51:54.134686 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0521 19:51:54.233505 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0521 19:51:54.333541 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0521 19:51:54.583613 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0521 19:55:26.991718 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.020578 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.032946 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.047349 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.313443 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.556525 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.622414 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:27.729631 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:28.284596 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:28.894601 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0521 19:55:28.988189 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0521 19:55:28.988253 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0521 19:55:29.062668 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0521 19:55:29.154621 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0521 19:55:29.205076 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0521 19:55:31.623526 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0521 19:55:31.653277 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0521 19:55:31.728467 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0521 19:55:31.877510 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0521 19:55:31.944539 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle I0521 19:57:18.178642 1 configmap.go:109] updating configmap managed-tenant-m5ei4/openshift-service-ca.crt with the service signing CA bundle I0521 19:57:19.611587 1 configmap.go:109] updating configmap managed-tenant-m5ei4/config-service-cabundle with the service signing CA bundle W0521 20:01:28.202658 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"