W0408 02:39:27.160339 1 cmd.go:257] Using insecure, self-signed certificates I0408 02:39:27.160551 1 crypto.go:601] Generating new CA for service-ca-controller-signer@1775615967 cert, and key in /tmp/serving-cert-107221365/serving-signer.crt, /tmp/serving-cert-107221365/serving-signer.key Validity period of the certificate for "service-ca-controller-signer@1775615967" is unset, resetting to 157680000000000000 years! I0408 02:39:27.855157 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0408 02:39:27.855482 1 observer_polling.go:159] Starting file observer I0408 02:39:27.855583 1 envvar.go:172] "Feature gate default state" feature="ClientsAllowCBOR" enabled=false I0408 02:39:27.855597 1 envvar.go:172] "Feature gate default state" feature="ClientsPreferCBOR" enabled=false I0408 02:39:27.855602 1 envvar.go:172] "Feature gate default state" feature="InformerResourceVersion" enabled=false I0408 02:39:27.855606 1 envvar.go:172] "Feature gate default state" feature="WatchListClient" enabled=false I0408 02:39:27.889967 1 builder.go:304] service-ca-controller version - I0408 02:39:27.890671 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-107221365/tls.crt::/tmp/serving-cert-107221365/tls.key" I0408 02:39:28.287617 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0408 02:39:28.293527 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0408 02:39:28.293547 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0408 02:39:28.293567 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0408 02:39:28.293571 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0408 02:39:28.297115 1 secure_serving.go:57] Forcing use of http/1.1 only I0408 02:39:28.297126 1 genericapiserver.go:535] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete W0408 02:39:28.297135 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected. W0408 02:39:28.297140 1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected. W0408 02:39:28.297144 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_GCM_SHA256' detected. W0408 02:39:28.297147 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_GCM_SHA384' detected. W0408 02:39:28.297150 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_128_CBC_SHA' detected. W0408 02:39:28.297153 1 secure_serving.go:69] Use of insecure cipher 'TLS_RSA_WITH_AES_256_CBC_SHA' detected. I0408 02:39:28.302774 1 leaderelection.go:257] attempting to acquire leader lease openshift-service-ca/service-ca-controller-lock... I0408 02:39:28.302894 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0408 02:39:28.302926 1 shared_informer.go:313] Waiting for caches to sync for RequestHeaderAuthRequestController I0408 02:39:28.302937 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0408 02:39:28.302948 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0408 02:39:28.302974 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0408 02:39:28.302999 1 shared_informer.go:313] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0408 02:39:28.303070 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-107221365/tls.crt::/tmp/serving-cert-107221365/tls.key" I0408 02:39:28.303184 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-107221365/tls.crt::/tmp/serving-cert-107221365/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1775615967\" (2026-04-08 02:39:26 +0000 UTC to 2026-04-08 02:39:27 +0000 UTC (now=2026-04-08 02:39:28.303132 +0000 UTC))" I0408 02:39:28.303372 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1775615968\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1775615968\" (2026-04-08 01:39:27 +0000 UTC to 2027-04-08 01:39:27 +0000 UTC (now=2026-04-08 02:39:28.303356268 +0000 UTC))" I0408 02:39:28.303392 1 secure_serving.go:213] Serving securely on [::]:8443 I0408 02:39:28.303408 1 genericapiserver.go:685] [graceful-termination] waiting for shutdown to be initiated I0408 02:39:28.303419 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0408 02:39:28.305457 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.305542 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.305563 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.317517 1 leaderelection.go:271] successfully acquired lease openshift-service-ca/service-ca-controller-lock I0408 02:39:28.317561 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"openshift-service-ca", Name:"service-ca-controller-lock", UID:"e3d28ff1-e285-4487-9be1-6e7ddfb00f47", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"10285", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' service-ca-d9d958b49-qlfdz_c1afecaa-a8a4-41f6-9195-74d1b719509f became leader I0408 02:39:28.320226 1 base_controller.go:76] Waiting for caches to sync for APIServiceCABundleInjector I0408 02:39:28.320301 1 base_controller.go:76] Waiting for caches to sync for LegacyVulnerableConfigMapCABundleInjector I0408 02:39:28.320440 1 base_controller.go:76] Waiting for caches to sync for CRDCABundleInjector I0408 02:39:28.320241 1 base_controller.go:76] Waiting for caches to sync for ValidatingWebhookCABundleInjector I0408 02:39:28.321069 1 base_controller.go:76] Waiting for caches to sync for MutatingWebhookCABundleInjector I0408 02:39:28.320227 1 base_controller.go:76] Waiting for caches to sync for ConfigMapCABundleInjector I0408 02:39:28.321941 1 starter.go:62] Setting certificate lifetime to 17520h0m0s, refresh certificate at 1h0m0s I0408 02:39:28.322259 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertUpdateController I0408 02:39:28.322315 1 base_controller.go:76] Waiting for caches to sync for ServiceServingCertController I0408 02:39:28.322334 1 reflector.go:376] Caches populated for *v1.APIService from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.323097 1 reflector.go:376] Caches populated for *v1.MutatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.324192 1 reflector.go:376] Caches populated for *v1.ValidatingWebhookConfiguration from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.330999 1 reflector.go:376] Caches populated for *v1.Service from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.375344 1 reflector.go:376] Caches populated for *v1.Secret from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.403886 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file I0408 02:39:28.403896 1 shared_informer.go:320] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file I0408 02:39:28.403905 1 shared_informer.go:320] Caches are synced for RequestHeaderAuthRequestController I0408 02:39:28.404109 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-08 02:28:44 +0000 UTC to 2036-04-05 02:28:44 +0000 UTC (now=2026-04-08 02:39:28.404071986 +0000 UTC))" I0408 02:39:28.404400 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-107221365/tls.crt::/tmp/serving-cert-107221365/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1775615967\" (2026-04-08 02:39:26 +0000 UTC to 2026-04-08 02:39:27 +0000 UTC (now=2026-04-08 02:39:28.404382788 +0000 UTC))" I0408 02:39:28.404619 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1775615968\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1775615968\" (2026-04-08 01:39:27 +0000 UTC to 2027-04-08 01:39:27 +0000 UTC (now=2026-04-08 02:39:28.404597437 +0000 UTC))" I0408 02:39:28.404861 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-04-08 02:28:47 +0000 UTC to 2036-04-05 02:28:47 +0000 UTC (now=2026-04-08 02:39:28.404840738 +0000 UTC))" I0408 02:39:28.404886 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-04-08 02:28:50 +0000 UTC to 2036-04-05 02:28:50 +0000 UTC (now=2026-04-08 02:39:28.404876496 +0000 UTC))" I0408 02:39:28.404901 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-04-08 02:28:55 +0000 UTC to 2036-04-05 02:28:55 +0000 UTC (now=2026-04-08 02:39:28.404893324 +0000 UTC))" I0408 02:39:28.404917 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-04-08 02:28:58 +0000 UTC to 2036-04-05 02:28:58 +0000 UTC (now=2026-04-08 02:39:28.404908426 +0000 UTC))" I0408 02:39:28.404933 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-04-08 02:29:02 +0000 UTC to 2036-04-05 02:29:02 +0000 UTC (now=2026-04-08 02:39:28.404923583 +0000 UTC))" I0408 02:39:28.404975 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2phms2giigvfvsds2o6sgo9pgqaup61d-kx-704d794a73_customer-system-admin-signer@1775615436\" [] issuer=\"\" (2026-04-08 02:30:37 +0000 UTC to 2026-04-15 02:30:38 +0000 UTC (now=2026-04-08 02:39:28.404945191 +0000 UTC))" I0408 02:39:28.405009 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2phms2giigvfvsds2o6sgo9pgqaup61d-kx-704d794a73_sre-system-admin-signer@1775615436\" [] issuer=\"\" (2026-04-08 02:30:37 +0000 UTC to 2026-04-15 02:30:38 +0000 UTC (now=2026-04-08 02:39:28.404991833 +0000 UTC))" I0408 02:39:28.405028 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-04-08 02:28:44 +0000 UTC to 2036-04-05 02:28:44 +0000 UTC (now=2026-04-08 02:39:28.405019394 +0000 UTC))" I0408 02:39:28.405238 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-107221365/tls.crt::/tmp/serving-cert-107221365/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"service-ca-controller-signer@1775615967\" (2026-04-08 02:39:26 +0000 UTC to 2026-04-08 02:39:27 +0000 UTC (now=2026-04-08 02:39:28.405226125 +0000 UTC))" I0408 02:39:28.405402 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1775615968\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1775615968\" (2026-04-08 01:39:27 +0000 UTC to 2027-04-08 01:39:27 +0000 UTC (now=2026-04-08 02:39:28.405392031 +0000 UTC))" I0408 02:39:28.419606 1 reflector.go:376] Caches populated for *v1.ConfigMap from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.420348 1 base_controller.go:82] Caches are synced for APIServiceCABundleInjector I0408 02:39:28.420365 1 base_controller.go:119] Starting #1 worker of APIServiceCABundleInjector controller ... I0408 02:39:28.420374 1 base_controller.go:119] Starting #2 worker of APIServiceCABundleInjector controller ... I0408 02:39:28.420380 1 base_controller.go:119] Starting #3 worker of APIServiceCABundleInjector controller ... I0408 02:39:28.420383 1 base_controller.go:119] Starting #4 worker of APIServiceCABundleInjector controller ... I0408 02:39:28.420387 1 base_controller.go:119] Starting #5 worker of APIServiceCABundleInjector controller ... I0408 02:39:28.420525 1 base_controller.go:82] Caches are synced for ValidatingWebhookCABundleInjector I0408 02:39:28.420543 1 base_controller.go:119] Starting #1 worker of ValidatingWebhookCABundleInjector controller ... I0408 02:39:28.420557 1 base_controller.go:119] Starting #2 worker of ValidatingWebhookCABundleInjector controller ... I0408 02:39:28.420566 1 base_controller.go:119] Starting #3 worker of ValidatingWebhookCABundleInjector controller ... I0408 02:39:28.420574 1 base_controller.go:119] Starting #4 worker of ValidatingWebhookCABundleInjector controller ... I0408 02:39:28.420578 1 base_controller.go:119] Starting #5 worker of ValidatingWebhookCABundleInjector controller ... I0408 02:39:28.420590 1 admissionwebhook.go:116] updating validatingwebhookconfiguration performance-addon-operator with the service signing CA bundle I0408 02:39:28.421123 1 base_controller.go:82] Caches are synced for MutatingWebhookCABundleInjector I0408 02:39:28.421132 1 base_controller.go:119] Starting #1 worker of MutatingWebhookCABundleInjector controller ... I0408 02:39:28.421136 1 base_controller.go:119] Starting #2 worker of MutatingWebhookCABundleInjector controller ... I0408 02:39:28.421139 1 base_controller.go:119] Starting #3 worker of MutatingWebhookCABundleInjector controller ... I0408 02:39:28.421142 1 base_controller.go:119] Starting #4 worker of MutatingWebhookCABundleInjector controller ... I0408 02:39:28.421146 1 base_controller.go:119] Starting #5 worker of MutatingWebhookCABundleInjector controller ... I0408 02:39:28.421466 1 base_controller.go:82] Caches are synced for LegacyVulnerableConfigMapCABundleInjector I0408 02:39:28.421480 1 base_controller.go:119] Starting #1 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0408 02:39:28.421487 1 base_controller.go:119] Starting #2 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0408 02:39:28.421492 1 base_controller.go:119] Starting #3 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0408 02:39:28.421497 1 base_controller.go:119] Starting #4 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0408 02:39:28.421502 1 base_controller.go:119] Starting #5 worker of LegacyVulnerableConfigMapCABundleInjector controller ... I0408 02:39:28.421837 1 base_controller.go:82] Caches are synced for ConfigMapCABundleInjector I0408 02:39:28.421848 1 base_controller.go:119] Starting #1 worker of ConfigMapCABundleInjector controller ... I0408 02:39:28.421852 1 base_controller.go:119] Starting #2 worker of ConfigMapCABundleInjector controller ... I0408 02:39:28.421855 1 base_controller.go:119] Starting #3 worker of ConfigMapCABundleInjector controller ... I0408 02:39:28.421858 1 base_controller.go:119] Starting #4 worker of ConfigMapCABundleInjector controller ... I0408 02:39:28.421861 1 base_controller.go:119] Starting #5 worker of ConfigMapCABundleInjector controller ... I0408 02:39:28.421879 1 configmap.go:109] updating configmap dedicated-admin/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.421923 1 configmap.go:109] updating configmap default/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.421934 1 configmap.go:109] updating configmap kube-node-lease/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.421945 1 configmap.go:109] updating configmap kube-public/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.421955 1 configmap.go:109] updating configmap kube-system/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.422324 1 base_controller.go:82] Caches are synced for ServiceServingCertUpdateController I0408 02:39:28.422341 1 base_controller.go:119] Starting #1 worker of ServiceServingCertUpdateController controller ... I0408 02:39:28.422347 1 base_controller.go:119] Starting #2 worker of ServiceServingCertUpdateController controller ... I0408 02:39:28.422349 1 base_controller.go:82] Caches are synced for ServiceServingCertController I0408 02:39:28.422356 1 base_controller.go:119] Starting #1 worker of ServiceServingCertController controller ... I0408 02:39:28.422360 1 base_controller.go:119] Starting #2 worker of ServiceServingCertController controller ... I0408 02:39:28.422350 1 base_controller.go:119] Starting #3 worker of ServiceServingCertUpdateController controller ... I0408 02:39:28.422364 1 base_controller.go:119] Starting #3 worker of ServiceServingCertController controller ... I0408 02:39:28.422367 1 base_controller.go:119] Starting #4 worker of ServiceServingCertUpdateController controller ... I0408 02:39:28.422368 1 base_controller.go:119] Starting #4 worker of ServiceServingCertController controller ... I0408 02:39:28.422371 1 base_controller.go:119] Starting #5 worker of ServiceServingCertUpdateController controller ... I0408 02:39:28.422372 1 base_controller.go:119] Starting #5 worker of ServiceServingCertController controller ... I0408 02:39:28.439550 1 configmap.go:109] updating configmap open-cluster-management-2phms2giigvfvsds2o6sgo9pgqaup61d/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.445645 1 configmap.go:109] updating configmap open-cluster-management-agent-addon/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.451318 1 configmap.go:109] updating configmap openshift-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.451680 1 configmap.go:109] updating configmap openshift-apiserver/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.458365 1 configmap.go:109] updating configmap openshift-authentication-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.458388 1 configmap.go:109] updating configmap openshift-authentication-operator/service-ca-bundle with the service signing CA bundle I0408 02:39:28.461387 1 configmap.go:109] updating configmap openshift-authentication/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.464745 1 configmap.go:109] updating configmap openshift-backplane-cee/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.465202 1 configmap.go:109] updating configmap openshift-backplane-cse/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.489827 1 reflector.go:376] Caches populated for *v1.CustomResourceDefinition from k8s.io/client-go@v0.32.2/tools/cache/reflector.go:251 I0408 02:39:28.521327 1 base_controller.go:82] Caches are synced for CRDCABundleInjector I0408 02:39:28.521362 1 base_controller.go:119] Starting #1 worker of CRDCABundleInjector controller ... I0408 02:39:28.521375 1 base_controller.go:119] Starting #2 worker of CRDCABundleInjector controller ... I0408 02:39:28.521380 1 base_controller.go:119] Starting #3 worker of CRDCABundleInjector controller ... I0408 02:39:28.521386 1 base_controller.go:119] Starting #4 worker of CRDCABundleInjector controller ... I0408 02:39:28.521390 1 base_controller.go:119] Starting #5 worker of CRDCABundleInjector controller ... I0408 02:39:28.521439 1 crd.go:69] updating customresourcedefinition alertmanagerconfigs.monitoring.coreos.com conversion webhook config with the service signing CA bundle W0408 02:39:28.521438 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook" I0408 02:39:28.531305 1 configmap.go:109] updating configmap openshift-backplane-csm/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.733140 1 configmap.go:109] updating configmap openshift-backplane-lpsre/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:28.935006 1 configmap.go:109] updating configmap openshift-backplane-managed-scripts/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:29.146857 1 configmap.go:109] updating configmap openshift-backplane-mcs-tier-two/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:29.336996 1 configmap.go:109] updating configmap openshift-backplane-mobb/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:29.533304 1 configmap.go:109] updating configmap openshift-backplane-srep-ro/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:29.738283 1 configmap.go:109] updating configmap openshift-backplane-srep/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:29.933887 1 configmap.go:109] updating configmap openshift-backplane-tam/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:30.137872 1 configmap.go:109] updating configmap openshift-backplane/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:30.335374 1 configmap.go:109] updating configmap openshift-cloud-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:30.535911 1 configmap.go:109] updating configmap openshift-cloud-credential-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:30.736165 1 configmap.go:109] updating configmap openshift-cloud-network-config-controller/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:30.935038 1 configmap.go:109] updating configmap openshift-cluster-csi-drivers/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:31.137235 1 configmap.go:109] updating configmap openshift-cluster-machine-approver/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:31.338002 1 configmap.go:109] updating configmap openshift-cluster-node-tuning-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:31.535625 1 configmap.go:109] updating configmap openshift-cluster-samples-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:31.739789 1 configmap.go:109] updating configmap openshift-cluster-storage-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:31.939728 1 configmap.go:109] updating configmap openshift-cluster-version/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:32.134033 1 configmap.go:109] updating configmap openshift-config-managed/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:32.333631 1 configmap.go:109] updating configmap openshift-config-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:32.534302 1 configmap.go:109] updating configmap openshift-config/openshift-service-ca.crt with the service signing CA bundle W0408 02:39:32.538146 1 warnings.go:70] annotation service.kubernetes.io/topology-aware-hints is deprecated, please use service.kubernetes.io/topology-mode instead I0408 02:39:32.744327 1 configmap.go:109] updating configmap openshift-console-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:32.938704 1 configmap.go:109] updating configmap openshift-console-user-settings/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:33.142041 1 configmap.go:109] updating configmap openshift-console/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:33.338057 1 configmap.go:109] updating configmap openshift-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:33.543574 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca with the service signing CA bundle I0408 02:39:33.741037 1 configmap.go:109] updating configmap openshift-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:33.934776 1 configmap.go:109] updating configmap openshift-customer-monitoring/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:34.141325 1 configmap.go:109] updating configmap openshift-deployment-validation-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:34.338258 1 configmap.go:109] updating configmap openshift-dns-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:34.536989 1 configmap.go:109] updating configmap openshift-dns/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:34.741358 1 configmap.go:109] updating configmap openshift-etcd/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:34.935226 1 configmap.go:109] updating configmap openshift-host-network/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:35.142652 1 configmap.go:109] updating configmap openshift-image-registry/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:35.337876 1 configmap.go:109] updating configmap openshift-image-registry/serviceca with the service signing CA bundle I0408 02:39:35.535943 1 configmap.go:109] updating configmap openshift-infra/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:35.738812 1 configmap.go:109] updating configmap openshift-ingress-canary/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:35.938771 1 configmap.go:109] updating configmap openshift-ingress-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:36.143011 1 configmap.go:109] updating configmap openshift-ingress/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:36.331935 1 configmap.go:109] updating configmap openshift-ingress/service-ca-bundle with the service signing CA bundle I0408 02:39:36.540869 1 configmap.go:109] updating configmap openshift-insights/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:36.736778 1 configmap.go:109] updating configmap openshift-insights/service-ca-bundle with the service signing CA bundle I0408 02:39:36.937823 1 configmap.go:109] updating configmap openshift-kube-apiserver-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:37.137527 1 configmap.go:109] updating configmap openshift-kube-apiserver/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:37.335583 1 configmap.go:109] updating configmap openshift-kube-controller-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:37.535734 1 configmap.go:109] updating configmap openshift-kube-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:37.737870 1 configmap.go:109] updating configmap openshift-kube-scheduler-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:37.943231 1 configmap.go:109] updating configmap openshift-kube-scheduler/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:38.137682 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:38.335909 1 configmap.go:109] updating configmap openshift-kube-storage-version-migrator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:38.538361 1 configmap.go:109] updating configmap openshift-logging/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:38.736841 1 configmap.go:109] updating configmap openshift-machine-api/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:38.939136 1 configmap.go:109] updating configmap openshift-machine-config-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:39.134829 1 configmap.go:109] updating configmap openshift-marketplace/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:39.332666 1 configmap.go:109] updating configmap openshift-monitoring/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:39.531833 1 configmap.go:109] updating configmap openshift-multus/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:39.735285 1 configmap.go:109] updating configmap openshift-must-gather-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:39.937563 1 configmap.go:109] updating configmap openshift-network-console/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:40.134754 1 configmap.go:109] updating configmap openshift-network-diagnostics/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:40.337227 1 configmap.go:109] updating configmap openshift-network-node-identity/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:40.536888 1 configmap.go:109] updating configmap openshift-network-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:40.736551 1 configmap.go:109] updating configmap openshift-node/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:40.938701 1 configmap.go:109] updating configmap openshift-operator-lifecycle-manager/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:41.140127 1 configmap.go:109] updating configmap openshift-operators-redhat/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:41.341382 1 configmap.go:109] updating configmap openshift-operators/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:41.533114 1 configmap.go:109] updating configmap openshift-ovn-kubernetes/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:41.734231 1 configmap.go:109] updating configmap openshift-package-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:41.935449 1 configmap.go:109] updating configmap openshift-route-controller-manager/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:42.138354 1 configmap.go:109] updating configmap openshift-service-ca-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:42.331044 1 configmap.go:109] updating configmap openshift-service-ca/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:42.543003 1 configmap.go:109] updating configmap openshift-user-workload-monitoring/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:42.735644 1 configmap.go:109] updating configmap openshift/openshift-service-ca.crt with the service signing CA bundle I0408 02:39:50.356188 1 configmap.go:109] updating configmap openshift-console/service-ca with the service signing CA bundle I0408 02:39:56.756254 1 admissionwebhook.go:116] updating validatingwebhookconfiguration prometheusrules.openshift.io with the service signing CA bundle I0408 02:39:56.768594 1 admissionwebhook.go:116] updating validatingwebhookconfiguration alertmanagerconfigs.openshift.io with the service signing CA bundle I0408 02:40:07.933506 1 configmap.go:109] updating configmap openshift-monitoring/telemeter-client-serving-certs-ca-bundle with the service signing CA bundle I0408 02:40:07.940969 1 configmap.go:109] updating configmap openshift-monitoring/serving-certs-ca-bundle with the service signing CA bundle I0408 02:40:42.990420 1 apiservice.go:62] updating apiservice v1beta1.metrics.k8s.io with the service signing CA bundle I0408 02:41:40.615968 1 admissionwebhook.go:116] updating validatingwebhookconfiguration monitoringconfigmaps.openshift.io with the service signing CA bundle I0408 02:46:26.679277 1 configmap.go:109] updating configmap tsf/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.574256 1 configmap.go:109] updating configmap tsf-keycloak/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.589106 1 configmap.go:109] updating configmap rhtpa-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.598037 1 configmap.go:109] updating configmap tsf-tas/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.611632 1 configmap.go:109] updating configmap konflux-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.629979 1 configmap.go:109] updating configmap tsf-tpa/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.640740 1 configmap.go:109] updating configmap rhbk-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.649774 1 configmap.go:109] updating configmap konflux-ui/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:30.661482 1 configmap.go:109] updating configmap cert-manager-operator/openshift-service-ca.crt with the service signing CA bundle I0408 02:46:55.205704 1 configmap.go:109] updating configmap cert-manager/openshift-service-ca.crt with the service signing CA bundle I0408 02:47:22.001697 1 configmap.go:109] updating configmap trusted-artifact-signer/openshift-service-ca.crt with the service signing CA bundle I0408 02:47:28.062548 1 configmap.go:109] updating configmap openshift-pipelines/openshift-service-ca.crt with the service signing CA bundle I0408 02:47:31.732671 1 configmap.go:109] updating configmap cert-manager/config-service-cabundle with the service signing CA bundle I0408 02:47:31.826364 1 configmap.go:109] updating configmap cert-manager-operator/config-service-cabundle with the service signing CA bundle I0408 02:47:31.931303 1 configmap.go:109] updating configmap default/config-service-cabundle with the service signing CA bundle I0408 02:47:32.024947 1 configmap.go:109] updating configmap konflux-operator/config-service-cabundle with the service signing CA bundle I0408 02:47:32.123686 1 configmap.go:109] updating configmap konflux-ui/config-service-cabundle with the service signing CA bundle I0408 02:47:32.224699 1 configmap.go:109] updating configmap open-cluster-management-2phms2giigvfvsds2o6sgo9pgqaup61d/config-service-cabundle with the service signing CA bundle I0408 02:47:32.329237 1 configmap.go:109] updating configmap openshift/config-service-cabundle with the service signing CA bundle I0408 02:47:32.424155 1 configmap.go:109] updating configmap rhbk-operator/config-service-cabundle with the service signing CA bundle I0408 02:47:32.526375 1 configmap.go:109] updating configmap rhtpa-operator/config-service-cabundle with the service signing CA bundle I0408 02:47:32.624103 1 configmap.go:109] updating configmap trusted-artifact-signer/config-service-cabundle with the service signing CA bundle I0408 02:47:32.725331 1 configmap.go:109] updating configmap tsf/config-service-cabundle with the service signing CA bundle I0408 02:47:32.823788 1 configmap.go:109] updating configmap tsf-keycloak/config-service-cabundle with the service signing CA bundle I0408 02:47:32.924220 1 configmap.go:109] updating configmap tsf-tas/config-service-cabundle with the service signing CA bundle I0408 02:47:33.024827 1 configmap.go:109] updating configmap tsf-tpa/config-service-cabundle with the service signing CA bundle I0408 02:47:33.164017 1 configmap.go:109] updating configmap openshift-pipelines/config-service-cabundle with the service signing CA bundle I0408 02:51:12.470005 1 configmap.go:109] updating configmap build-service/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:12.478892 1 configmap.go:109] updating configmap image-controller/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:12.492056 1 configmap.go:109] updating configmap integration-service/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:12.499628 1 configmap.go:109] updating configmap default-tenant/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:12.970125 1 configmap.go:109] updating configmap release-service/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:13.281053 1 configmap.go:109] updating configmap konflux-info/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:13.554753 1 configmap.go:109] updating configmap namespace-lister/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:13.705776 1 configmap.go:109] updating configmap enterprise-contract-service/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:14.348253 1 configmap.go:109] updating configmap segment-bridge/openshift-service-ca.crt with the service signing CA bundle I0408 02:51:16.120093 1 configmap.go:109] updating configmap build-service/config-service-cabundle with the service signing CA bundle I0408 02:51:16.177944 1 configmap.go:109] updating configmap default-tenant/config-service-cabundle with the service signing CA bundle I0408 02:51:16.252386 1 configmap.go:109] updating configmap image-controller/config-service-cabundle with the service signing CA bundle I0408 02:51:16.319983 1 configmap.go:109] updating configmap integration-service/config-service-cabundle with the service signing CA bundle I0408 02:51:18.897010 1 configmap.go:109] updating configmap enterprise-contract-service/config-service-cabundle with the service signing CA bundle I0408 02:51:18.978142 1 configmap.go:109] updating configmap konflux-info/config-service-cabundle with the service signing CA bundle I0408 02:51:19.075262 1 configmap.go:109] updating configmap namespace-lister/config-service-cabundle with the service signing CA bundle I0408 02:51:19.177072 1 configmap.go:109] updating configmap release-service/config-service-cabundle with the service signing CA bundle I0408 02:51:19.273228 1 configmap.go:109] updating configmap segment-bridge/config-service-cabundle with the service signing CA bundle W0408 02:59:28.491060 1 crd.go:61] customresourcedefinition consoleplugins.console.openshift.io is annotated for ca bundle injection but does not use strategy "Webhook"