W0430 23:27:07.816243 1 cmd.go:257] Using insecure, self-signed certificates I0430 23:27:07.816446 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1777591627 cert, and key in /tmp/serving-cert-895764213/serving-signer.crt, /tmp/serving-cert-895764213/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1777591627" is unset, resetting to 157680000000000000 years! I0430 23:27:08.366553 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0430 23:27:08.366892 1 observer_polling.go:159] Starting file observer I0430 23:27:08.366979 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0430 23:27:08.366992 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0430 23:27:08.366997 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0430 23:27:08.367000 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0430 23:27:08.390230 1 builder.go:304] service-ca-controller version - I0430 23:27:08.392015 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-895764213/tls.crt::/tmp/serving-cert-895764213/tls.key" I0430 23:27:09.163734 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0430 23:27:09.170616 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0430 23:27:09.170632 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0430 23:27:09.170653 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0430 23:27:09.170658 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0430 23:27:09.173931 1 secure_serving.go:57] Forcing use of http/1.1 only I0430 23:27:09.173945 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0430 23:27:09.173949 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0430 23:27:09.173964 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0430 23:27:09.173968 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0430 23:27:09.173971 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0430 23:27:09.173973 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0430 23:27:09.173976 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0430 23:27:09.179797 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0430 23:27:09.179867 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0430 23:27:09.180061 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0430 23:27:09.180321 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-895764213/tls.crt::/tmp/serving-cert-895764213/tls.key" I0430 23:27:09.180755 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0430 23:27:09.180954 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0430 23:27:09.181125 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-895764213/tls.crt::/tmp/serving-cert-895764213/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777591627\" (2026-04-30 23:27:07 +0000 UTC to 2026-04-30 23:27:08 +0000 UTC (now=2026-04-30 23:27:09.180438038 +0000 UTC))" I0430 23:27:09.181225 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0430 23:27:09.181184 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0430 23:27:09.181764 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777591629\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777591628\" (2026-04-30 22:27:08 +0000 UTC to 2027-04-30 22:27:08 +0000 UTC (now=2026-04-30 23:27:09.181739267 +0000 UTC))" I0430 23:27:09.181785 1 secure_serving.go:213] Serving securely on [::]:8443 I0430 23:27:09.181803 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0430 23:27:09.181815 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0430 23:27:09.182578 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.184705 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.184707 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.193206 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0430 23:27:09.193247 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"bec263e3-1254-4468-90c5-87d8d00b7999", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"9542", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9cb48497-4bkmj_ce2e74a1-389d-407c-866d-6fbf78650829 became leader I0430 23:27:09.194343 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0430 23:27:09.194344 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0430 23:27:09.194358 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0430 23:27:09.194345 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0430 23:27:09.194372 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0430 23:27:09.194458 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0430 23:27:09.194801 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0430 23:27:09.195114 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0430 23:27:09.195137 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0430 23:27:09.199228 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.200812 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.200900 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.203848 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.244916 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.279954 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0430 23:27:09.281540 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0430 23:27:09.281545 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0430 23:27:09.281696 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.281827 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-30 23:15:15 +0000 UTC to 2036-04-27 23:15:15 +0000 UTC (now=2026-04-30 23:27:09.281783062 +0000 UTC))" I0430 23:27:09.282107 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-895764213/tls.crt::/tmp/serving-cert-895764213/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777591627\" (2026-04-30 23:27:07 +0000 UTC to 2026-04-30 23:27:08 +0000 UTC (now=2026-04-30 23:27:09.282086015 +0000 UTC))" I0430 23:27:09.282311 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777591629\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777591628\" (2026-04-30 22:27:08 +0000 UTC to 2027-04-30 22:27:08 +0000 UTC (now=2026-04-30 23:27:09.282298084 +0000 UTC))" I0430 23:27:09.282436 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-30 23:15:16 +0000 UTC to 2036-04-27 23:15:16 +0000 UTC (now=2026-04-30 23:27:09.282425051 +0000 UTC))" I0430 23:27:09.282457 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-30 23:15:25 +0000 UTC to 2036-04-27 23:15:25 +0000 UTC (now=2026-04-30 23:27:09.282447431 +0000 UTC))" I0430 23:27:09.282479 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-30 23:15:26 +0000 UTC to 2036-04-27 23:15:26 +0000 UTC (now=2026-04-30 23:27:09.282463405 +0000 UTC))" I0430 23:27:09.282498 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-30 23:15:30 +0000 UTC to 2036-04-27 23:15:30 +0000 UTC (now=2026-04-30 23:27:09.282489163 +0000 UTC))" I0430 23:27:09.282512 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-30 23:15:33 +0000 UTC to 2036-04-27 23:15:33 +0000 UTC (now=2026-04-30 23:27:09.282504939 +0000 UTC))" I0430 23:27:09.282532 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q0p22akbres55ngbqbdeuklsvdbep2e-kx-881aac4dfb_customer-system-admin-signer@1777591027\" [] issuer=\"\" (2026-04-30 23:17:07 +0000 UTC to 2026-05-07 23:17:08 +0000 UTC (now=2026-04-30 23:27:09.282521573 +0000 UTC))" I0430 23:27:09.282551 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q0p22akbres55ngbqbdeuklsvdbep2e-kx-881aac4dfb_sre-system-admin-signer@1777591027\" [] issuer=\"\" (2026-04-30 23:17:08 +0000 UTC to 2026-05-07 23:17:09 +0000 UTC (now=2026-04-30 23:27:09.28254198 +0000 UTC))" I0430 23:27:09.282566 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-30 23:15:15 +0000 UTC to 2036-04-27 23:15:15 +0000 UTC (now=2026-04-30 23:27:09.282558071 +0000 UTC))" I0430 23:27:09.282892 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-895764213/tls.crt::/tmp/serving-cert-895764213/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1777591627\" (2026-04-30 23:27:07 +0000 UTC to 2026-04-30 23:27:08 +0000 UTC (now=2026-04-30 23:27:09.28287269 +0000 UTC))" I0430 23:27:09.283183 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777591629\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777591628\" (2026-04-30 22:27:08 +0000 UTC to 2027-04-30 22:27:08 +0000 UTC (now=2026-04-30 23:27:09.28316324 +0000 UTC))" I0430 23:27:09.294387 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0430 23:27:09.294397 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0430 23:27:09.294400 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0430 23:27:09.294405 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0430 23:27:09.294408 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0430 23:27:09.294411 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0430 23:27:09.294415 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0430 23:27:09.294418 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0430 23:27:09.294421 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0430 23:27:09.294418 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0430 23:27:09.294430 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0430 23:27:09.294438 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0430 23:27:09.294441 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0430 23:27:09.294412 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0430 23:27:09.294448 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.294453 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.294456 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0430 23:27:09.294464 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0430 23:27:09.294463 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.294445 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0430 23:27:09.294473 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.294486 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0430 23:27:09.294485 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0430 23:27:09.294489 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0430 23:27:09.294496 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 23:27:09.294491 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0430 23:27:09.294504 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0430 23:27:09.294500 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 23:27:09.294511 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 23:27:09.294514 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 23:27:09.294517 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0430 23:27:09.294507 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0430 23:27:09.294524 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0430 23:27:09.294532 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0430 23:27:09.294536 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0430 23:27:09.294572 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.295166 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0430 23:27:09.295179 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0430 23:27:09.295185 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0430 23:27:09.295190 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0430 23:27:09.295195 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0430 23:27:09.295200 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0430 23:27:09.295247 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0430 23:27:09.295256 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0430 23:27:09.295260 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0430 23:27:09.295263 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0430 23:27:09.295266 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0430 23:27:09.295268 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0430 23:27:09.308641 1 configmap.go:109] updating configmap open-cluster-management-2q0p22akbres55ngbqbdeuklsvdbep2e/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.308736 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.312458 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.312504 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.312547 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.322799 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0430 23:27:09.327913 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.328246 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.328273 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.366818 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0430 23:27:09.395134 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0430 23:27:09.395156 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0430 23:27:09.395165 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0430 23:27:09.395168 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0430 23:27:09.395172 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0430 23:27:09.395175 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0430 23:27:09.395202 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0430 23:27:09.395227 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0430 23:27:09.405221 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.610173 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:09.807782 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:10.005921 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:10.206852 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:10.405951 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:10.607941 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:10.808696 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:11.005714 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:11.205684 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:11.406477 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:11.605489 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:11.805001 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:12.006009 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:12.207869 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:12.407110 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:12.620042 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:12.808357 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:13.015268 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:13.207095 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:13.403381 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:13.602939 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:13.804923 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:14.005883 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:14.205541 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:14.407916 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0430 23:27:14.606959 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:14.807197 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:15.004945 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:15.215485 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:15.404945 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:15.607948 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:15.807433 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:16.005773 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:16.212890 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0430 23:27:16.407065 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:16.606320 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:16.807365 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:17.005812 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:17.206635 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0430 23:27:17.405363 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:17.615634 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0430 23:27:17.805493 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:18.009347 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:18.206764 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:18.407216 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:18.607508 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:18.807614 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:19.006211 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:19.206867 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:19.405931 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:19.605383 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:19.805485 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:20.006341 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:20.204004 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:20.420516 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:20.604900 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:20.802755 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:21.005221 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:21.203040 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:21.405808 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:21.605116 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:21.802880 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:22.005051 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:22.204708 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:22.405722 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:22.604951 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:22.802773 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:23.004768 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:23.208315 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:23.404616 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0430 23:27:23.603586 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0430 23:28:02.151352 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0430 23:35:03.440397 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0430 23:35:03.455588 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0430 23:35:08.606452 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0430 23:35:08.611576 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0430 23:35:44.547967 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0430 23:36:55.674703 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0430 23:41:21.474594 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.578170 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.606396 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.630691 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.642952 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.672424 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.675281 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.709478 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:25.725432 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0430 23:41:53.071247 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0430 23:42:13.798570 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0430 23:42:17.085619 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0430 23:42:22.071932 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0430 23:42:22.173990 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0430 23:42:22.272515 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0430 23:42:22.372510 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0430 23:42:22.474373 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0430 23:42:22.577303 1 configmap.go:109] updating configmap open-cluster-management-2q0p22akbres55ngbqbdeuklsvdbep2e/config-service-cabundle with the service signing CA bundle I0430 23:42:22.683538 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0430 23:42:22.775045 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0430 23:42:22.878151 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0430 23:42:22.974415 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0430 23:42:23.074200 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0430 23:42:23.179014 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0430 23:42:23.276326 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0430 23:42:23.372900 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0430 23:42:23.517970 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0430 23:45:56.549970 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:56.559578 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:56.573598 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:56.582334 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:56.872582 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:57.150278 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:57.190654 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:57.291896 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:58.366923 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:58.656936 1 configmap.go:109] updating configmap konflux-cli/openshift-service-ca.crt with the service signing CA bundle I0430 23:45:58.989868 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0430 23:45:59.049617 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0430 23:45:59.146277 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0430 23:45:59.209481 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0430 23:45:59.291198 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0430 23:45:59.376363 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0430 23:45:59.493312 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0430 23:46:01.470425 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0430 23:46:01.543985 1 configmap.go:109] updating configmap konflux-cli/config-service-cabundle with the service signing CA bundle I0430 23:46:01.639160 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle W0430 23:47:09.367692 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0430 23:47:46.677717 1 configmap.go:109] updating configmap managed-tenant-ytau8/openshift-service-ca.crt with the service signing CA bundle I0430 23:47:48.146534 1 configmap.go:109] updating configmap managed-tenant-ytau8/config-service-cabundle with the service signing CA bundle