W0421 14:59:36.049391 1 cmd.go:257] Using insecure, self-signed certificates I0421 14:59:36.049606 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1776783576 cert, and key in /tmp/serving-cert-3605813083/serving-signer.crt, /tmp/serving-cert-3605813083/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1776783576" is unset, resetting to 157680000000000000 years! I0421 14:59:36.487193 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0421 14:59:36.487556 1 observer_polling.go:159] Starting file observer I0421 14:59:36.487652 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0421 14:59:36.487664 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0421 14:59:36.487669 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0421 14:59:36.487672 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0421 14:59:36.512287 1 builder.go:304] service-ca-controller version - I0421 14:59:36.512898 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3605813083/tls.crt::/tmp/serving-cert-3605813083/tls.key" I0421 14:59:37.055465 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0421 14:59:37.061088 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0421 14:59:37.061104 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0421 14:59:37.061126 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0421 14:59:37.061133 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0421 14:59:37.064217 1 secure_serving.go:57] Forcing use of http/1.1 only I0421 14:59:37.064244 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0421 14:59:37.064247 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0421 14:59:37.064253 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0421 14:59:37.064256 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0421 14:59:37.064259 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0421 14:59:37.064261 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0421 14:59:37.064264 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0421 14:59:37.069052 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0421 14:59:37.069045 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0421 14:59:37.069074 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0421 14:59:37.069090 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0421 14:59:37.069091 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0421 14:59:37.069090 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0421 14:59:37.069447 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3605813083/tls.crt::/tmp/serving-cert-3605813083/tls.key" I0421 14:59:37.069622 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3605813083/tls.crt::/tmp/serving-cert-3605813083/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776783576\" (2026-04-21 14:59:35 +0000 UTC to 2026-04-21 14:59:36 +0000 UTC (now=2026-04-21 14:59:37.069580418 +0000 UTC))" I0421 14:59:37.069889 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776783577\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776783576\" (2026-04-21 13:59:36 +0000 UTC to 2027-04-21 13:59:36 +0000 UTC (now=2026-04-21 14:59:37.069867431 +0000 UTC))" I0421 14:59:37.069914 1 secure_serving.go:213] Serving securely on [::]:8443 I0421 14:59:37.069941 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0421 14:59:37.069959 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0421 14:59:37.070301 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0421 14:59:37.072484 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.072516 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.072487 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.082626 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0421 14:59:37.082752 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"164d7603-03d8-4042-a519-3f07a48b1f1b", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9937", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-klr5x_bbf6e128-90b4-457e-8436-9d873bbd9c5c became leader I0421 14:59:37.084869 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0421 14:59:37.084883 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0421 14:59:37.084892 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0421 14:59:37.084877 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0421 14:59:37.084936 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0421 14:59:37.085042 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0421 14:59:37.085821 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0421 14:59:37.086069 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0421 14:59:37.086106 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0421 14:59:37.093839 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.093952 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.094253 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.094494 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.145119 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.169158 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0421 14:59:37.169169 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0421 14:59:37.169181 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0421 14:59:37.169344 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-21 14:48:18 +0000 UTC to 2036-04-18 14:48:18 +0000 UTC (now=2026-04-21 14:59:37.169320521 +0000 UTC))" I0421 14:59:37.169551 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3605813083/tls.crt::/tmp/serving-cert-3605813083/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776783576\" (2026-04-21 14:59:35 +0000 UTC to 2026-04-21 14:59:36 +0000 UTC (now=2026-04-21 14:59:37.169538023 +0000 UTC))" I0421 14:59:37.169720 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776783577\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776783576\" (2026-04-21 13:59:36 +0000 UTC to 2027-04-21 13:59:36 +0000 UTC (now=2026-04-21 14:59:37.169708803 +0000 UTC))" I0421 14:59:37.169852 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-21 14:48:25 +0000 UTC to 2036-04-18 14:48:25 +0000 UTC (now=2026-04-21 14:59:37.169842467 +0000 UTC))" I0421 14:59:37.169872 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-21 14:48:27 +0000 UTC to 2036-04-18 14:48:27 +0000 UTC (now=2026-04-21 14:59:37.169863324 +0000 UTC))" I0421 14:59:37.169888 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-21 14:48:32 +0000 UTC to 2036-04-18 14:48:32 +0000 UTC (now=2026-04-21 14:59:37.169879768 +0000 UTC))" I0421 14:59:37.169904 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-21 14:48:33 +0000 UTC to 2036-04-18 14:48:33 +0000 UTC (now=2026-04-21 14:59:37.1698962 +0000 UTC))" I0421 14:59:37.169918 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-21 14:48:35 +0000 UTC to 2036-04-18 14:48:35 +0000 UTC (now=2026-04-21 14:59:37.169910868 +0000 UTC))" I0421 14:59:37.169935 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pqjtmvbm33oc5395jk2up7svnpqpdjs-kx-d8bdce57ed_customer-system-admin-signer@1776783024\" [] issuer=\"\" (2026-04-21 14:50:25 +0000 UTC to 2026-04-28 14:50:26 +0000 UTC (now=2026-04-21 14:59:37.169926582 +0000 UTC))" I0421 14:59:37.169964 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pqjtmvbm33oc5395jk2up7svnpqpdjs-kx-d8bdce57ed_sre-system-admin-signer@1776783024\" [] issuer=\"\" (2026-04-21 14:50:29 +0000 UTC to 2026-04-28 14:50:30 +0000 UTC (now=2026-04-21 14:59:37.169945051 +0000 UTC))" I0421 14:59:37.169990 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-21 14:48:18 +0000 UTC to 2036-04-18 14:48:18 +0000 UTC (now=2026-04-21 14:59:37.169981677 +0000 UTC))" I0421 14:59:37.170151 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3605813083/tls.crt::/tmp/serving-cert-3605813083/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1776783576\" (2026-04-21 14:59:35 +0000 UTC to 2026-04-21 14:59:36 +0000 UTC (now=2026-04-21 14:59:37.170141966 +0000 UTC))" I0421 14:59:37.170353 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1776783577\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1776783576\" (2026-04-21 13:59:36 +0000 UTC to 2027-04-21 13:59:36 +0000 UTC (now=2026-04-21 14:59:37.170343201 +0000 UTC))" I0421 14:59:37.185104 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0421 14:59:37.185128 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0421 14:59:37.185139 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0421 14:59:37.185143 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0421 14:59:37.185146 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0421 14:59:37.185148 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0421 14:59:37.185175 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0421 14:59:37.185185 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0421 14:59:37.185194 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0421 14:59:37.185199 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0421 14:59:37.185203 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0421 14:59:37.185108 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0421 14:59:37.185230 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0421 14:59:37.185207 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0421 14:59:37.185243 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0421 14:59:37.185251 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0421 14:59:37.185261 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0421 14:59:37.185273 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0421 14:59:37.185276 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0421 14:59:37.185960 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.186100 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0421 14:59:37.186109 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0421 14:59:37.186114 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0421 14:59:37.186118 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0421 14:59:37.186121 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0421 14:59:37.186124 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0421 14:59:37.186132 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0421 14:59:37.186135 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0421 14:59:37.186138 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0421 14:59:37.186141 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0421 14:59:37.186144 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0421 14:59:37.186147 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0421 14:59:37.244715 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0421 14:59:37.285095 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0421 14:59:37.285106 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0421 14:59:37.285111 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0421 14:59:37.285115 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0421 14:59:37.285118 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0421 14:59:37.285121 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0421 14:59:37.285122 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0421 14:59:37.285136 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0421 14:59:37.285141 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0421 14:59:37.285145 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0421 14:59:37.285147 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle I0421 14:59:37.285159 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector W0421 14:59:37.285155 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0421 14:59:37.285174 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 14:59:37.285178 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.285191 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.285191 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 14:59:37.285265 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 14:59:37.285150 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0421 14:59:37.285214 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.285288 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0421 14:59:37.285308 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.285347 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.285276 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 14:59:37.285385 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0421 14:59:37.299805 1 configmap.go:109] updating configmap open-cluster-management-2pqjtmvbm33oc5395jk2up7svnpqpdjs/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.300595 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.304214 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.304462 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.304534 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.315457 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0421 14:59:37.318447 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.318858 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.323568 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.323788 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.496569 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.716208 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:37.904246 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:38.096893 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:38.300261 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:38.496791 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:38.699513 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:38.897890 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:39.095962 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:39.304030 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:39.497933 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:39.696696 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:39.899131 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:40.098348 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:40.297798 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:40.497437 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:40.699907 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:40.899586 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:41.098271 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle W0421 14:59:41.296624 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0421 14:59:41.300235 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:41.499502 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:41.701357 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:41.910689 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:42.098113 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:42.298411 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0421 14:59:42.519309 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:42.699831 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:42.897678 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:43.098269 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:43.295671 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:43.496572 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:43.698873 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:43.899507 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:44.098983 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0421 14:59:44.298453 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:44.497407 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:44.701125 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:44.899597 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:45.107530 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0421 14:59:45.306257 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:45.506393 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0421 14:59:45.702476 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:45.900130 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:46.105697 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:46.299130 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:46.501060 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:46.698081 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:46.896656 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:47.099148 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:47.296805 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:47.500177 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:47.701240 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:47.896895 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:48.094897 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:48.300008 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:48.499687 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:48.698856 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:48.896381 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:49.099969 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:49.296331 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:49.495069 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:49.695949 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:49.898472 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:50.094967 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:50.301491 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:50.503397 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:50.697438 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:50.895196 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:51.099569 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:51.296158 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0421 14:59:51.495628 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0421 15:00:02.225199 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0421 15:00:10.275336 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0421 15:00:10.291142 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0421 15:00:16.459416 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0421 15:00:16.459464 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0421 15:00:55.430105 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0421 15:04:03.524652 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0421 15:10:57.273212 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.378604 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.402639 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.423047 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.442341 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.463127 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.504840 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.520951 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:01.529749 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:45.724767 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:50.019701 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0421 15:11:53.478488 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:53.573891 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0421 15:11:53.670177 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:53.776672 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0421 15:11:53.869059 1 configmap.go:109] updating configmap open-cluster-management-2pqjtmvbm33oc5395jk2up7svnpqpdjs/config-service-cabundle with the service signing CA bundle I0421 15:11:53.969419 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0421 15:11:54.068445 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:54.170653 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0421 15:11:54.270148 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0421 15:11:54.368581 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0421 15:11:54.468616 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0421 15:11:54.570688 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0421 15:11:54.669601 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0421 15:11:54.789069 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle W0421 15:19:37.246038 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"