2022-03-08T11:04:47.635959597Z W0308 11:04:47.635803       1 cmd.go:204] Using insecure, self-signed certificates
2022-03-08T11:04:47.636285620Z I0308 11:04:47.636262       1 crypto.go:601] Generating new CA for check-endpoints-signer@1646737487 cert, and key in /tmp/serving-cert-113717963/serving-signer.crt, /tmp/serving-cert-113717963/serving-signer.key
2022-03-08T11:04:48.434955928Z I0308 11:04:48.434891       1 observer_polling.go:159] Starting file observer
2022-03-08T11:04:50.102291086Z W0308 11:04:50.102184       1 builder.go:207] unable to get owner reference (falling back to namespace): pods "kube-apiserver-master-1.case03116926.lab.upshift.rdu2.redhat.com" is forbidden: User "system:serviceaccount:openshift-kube-apiserver:check-endpoints" cannot get resource "pods" in API group "" in the namespace "openshift-kube-apiserver"
2022-03-08T11:04:50.105906502Z I0308 11:04:50.105848       1 builder.go:238] check-endpoints version v4.0.0-alpha.0-1136-g0a8f1f99-0a8f1f99f98b4637cfb5a22c61c92264687da859
2022-03-08T11:04:50.126628920Z I0308 11:04:50.126558       1 dynamic_serving_content.go:111] Loaded a new cert/key pair for "serving-cert::/tmp/serving-cert-113717963/tls.crt::/tmp/serving-cert-113717963/tls.key"
2022-03-08T11:04:50.584765193Z I0308 11:04:50.584713       1 requestheader_controller.go:244] Loaded a new request header values for RequestHeaderAuthRequestController
2022-03-08T11:04:50.596924751Z W0308 11:04:50.596887       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256' detected.
2022-03-08T11:04:50.596987691Z W0308 11:04:50.596977       1 secure_serving.go:69] Use of insecure cipher 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256' detected.
2022-03-08T11:04:50.604268822Z I0308 11:04:50.604209       1 tlsconfig.go:200] loaded serving cert ["serving-cert::/tmp/serving-cert-113717963/tls.crt::/tmp/serving-cert-113717963/tls.key"]: "localhost" [serving] validServingFor=[localhost] issuer="check-endpoints-signer@1646737487" (2022-03-08 11:04:47 +0000 UTC to 2022-04-07 11:04:48 +0000 UTC (now=2022-03-08 11:04:50.604182423 +0000 UTC))
2022-03-08T11:04:50.604363146Z I0308 11:04:50.604344       1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController
2022-03-08T11:04:50.604404943Z I0308 11:04:50.604397       1 shared_informer.go:240] Waiting for caches to sync for RequestHeaderAuthRequestController
2022-03-08T11:04:50.604431585Z I0308 11:04:50.604417       1 named_certificates.go:53] loaded SNI cert [0/"self-signed loopback"]: "apiserver-loopback-client@1646737490" [serving] validServingFor=[apiserver-loopback-client] issuer="apiserver-loopback-client-ca@1646737490" (2022-03-08 10:04:50 +0000 UTC to 2023-03-08 10:04:50 +0000 UTC (now=2022-03-08 11:04:50.604408936 +0000 UTC))
2022-03-08T11:04:50.604456884Z I0308 11:04:50.604448       1 configmap_cafile_content.go:202] Starting client-ca::kube-system::extension-apiserver-authentication::client-ca-file
2022-03-08T11:04:50.604478329Z I0308 11:04:50.604470       1 shared_informer.go:240] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file
2022-03-08T11:04:50.604498902Z I0308 11:04:50.604449       1 secure_serving.go:197] Serving securely on [::]:17697
2022-03-08T11:04:50.604542105Z I0308 11:04:50.604524       1 reflector.go:207] Starting reflector *v1.ConfigMap (12h0m0s) from k8s.io/client-go@v0.19.0/tools/cache/reflector.go:156
2022-03-08T11:04:50.604575448Z I0308 11:04:50.604565       1 reflector.go:207] Starting reflector *v1.ConfigMap (12h0m0s) from k8s.io/client-go@v0.19.0/tools/cache/reflector.go:156
2022-03-08T11:04:50.604701249Z I0308 11:04:50.604475       1 tlsconfig.go:240] Starting DynamicServingCertificateController
2022-03-08T11:04:50.604748355Z I0308 11:04:50.604482       1 dynamic_serving_content.go:130] Starting serving-cert::/tmp/serving-cert-113717963/tls.crt::/tmp/serving-cert-113717963/tls.key
2022-03-08T11:04:50.606793432Z I0308 11:04:50.604779       1 configmap_cafile_content.go:202] Starting client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
2022-03-08T11:04:50.606829390Z I0308 11:04:50.606796       1 shared_informer.go:240] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file
2022-03-08T11:04:50.606971475Z I0308 11:04:50.606922       1 reflector.go:207] Starting reflector *v1.ConfigMap (12h0m0s) from k8s.io/client-go@v0.19.0/tools/cache/reflector.go:156
2022-03-08T11:04:50.617056300Z I0308 11:04:50.617011       1 base_controller.go:66] Waiting for caches to sync for CheckEndpointsTimeToStart
2022-03-08T11:04:50.618276439Z I0308 11:04:50.618244       1 reflector.go:207] Starting reflector *v1.CustomResourceDefinition (10m0s) from k8s.io/client-go@v0.19.0/tools/cache/reflector.go:156
2022-03-08T11:04:50.705341957Z I0308 11:04:50.705289       1 shared_informer.go:247] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file 
2022-03-08T11:04:50.705442448Z I0308 11:04:50.705294       1 shared_informer.go:247] Caches are synced for RequestHeaderAuthRequestController 
2022-03-08T11:04:50.706192886Z I0308 11:04:50.706164       1 tlsconfig.go:178] loaded client CA [0/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "admin-kubeconfig-signer" [] issuer="<self>" (2022-03-08 10:10:26 +0000 UTC to 2032-03-05 10:10:26 +0000 UTC (now=2022-03-08 11:04:50.706149422 +0000 UTC))
2022-03-08T11:04:50.706619962Z I0308 11:04:50.706592       1 tlsconfig.go:178] loaded client CA [1/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kubelet-signer" [] issuer="<self>" (2022-03-08 10:10:30 +0000 UTC to 2022-03-09 10:10:30 +0000 UTC (now=2022-03-08 11:04:50.706579413 +0000 UTC))
2022-03-08T11:04:50.706659261Z I0308 11:04:50.706648       1 tlsconfig.go:178] loaded client CA [2/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kube-control-plane-signer" [] issuer="<self>" (2022-03-08 10:10:30 +0000 UTC to 2023-03-08 10:10:30 +0000 UTC (now=2022-03-08 11:04:50.706641587 +0000 UTC))
2022-03-08T11:04:50.706684955Z I0308 11:04:50.706675       1 tlsconfig.go:178] loaded client CA [3/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kube-apiserver-to-kubelet-signer" [] issuer="<self>" (2022-03-08 10:10:31 +0000 UTC to 2023-03-08 10:10:31 +0000 UTC (now=2022-03-08 11:04:50.706669927 +0000 UTC))
2022-03-08T11:04:50.706710932Z I0308 11:04:50.706700       1 tlsconfig.go:178] loaded client CA [4/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kubelet-bootstrap-kubeconfig-signer" [] issuer="<self>" (2022-03-08 10:10:27 +0000 UTC to 2032-03-05 10:10:27 +0000 UTC (now=2022-03-08 11:04:50.706694976 +0000 UTC))
2022-03-08T11:04:50.706735855Z I0308 11:04:50.706726       1 tlsconfig.go:178] loaded client CA [5/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kube-csr-signer_@1646735926" [] issuer="kubelet-signer" (2022-03-08 10:38:45 +0000 UTC to 2022-03-09 10:10:30 +0000 UTC (now=2022-03-08 11:04:50.706721421 +0000 UTC))
2022-03-08T11:04:50.706775508Z I0308 11:04:50.706765       1 tlsconfig.go:178] loaded client CA [6/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "openshift-kube-apiserver-operator_node-system-admin-signer@1646735931" [] issuer="<self>" (2022-03-08 10:38:50 +0000 UTC to 2023-03-08 10:38:51 +0000 UTC (now=2022-03-08 11:04:50.706758543 +0000 UTC))
2022-03-08T11:04:50.707502619Z I0308 11:04:50.707024       1 tlsconfig.go:200] loaded serving cert ["serving-cert::/tmp/serving-cert-113717963/tls.crt::/tmp/serving-cert-113717963/tls.key"]: "localhost" [serving] validServingFor=[localhost] issuer="check-endpoints-signer@1646737487" (2022-03-08 11:04:47 +0000 UTC to 2022-04-07 11:04:48 +0000 UTC (now=2022-03-08 11:04:50.707017611 +0000 UTC))
2022-03-08T11:04:50.707787538Z I0308 11:04:50.707737       1 named_certificates.go:53] loaded SNI cert [0/"self-signed loopback"]: "apiserver-loopback-client@1646737490" [serving] validServingFor=[apiserver-loopback-client] issuer="apiserver-loopback-client-ca@1646737490" (2022-03-08 10:04:50 +0000 UTC to 2023-03-08 10:04:50 +0000 UTC (now=2022-03-08 11:04:50.707726454 +0000 UTC))
2022-03-08T11:04:50.707823095Z I0308 11:04:50.707473       1 shared_informer.go:247] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file 
2022-03-08T11:04:50.708353375Z I0308 11:04:50.708289       1 tlsconfig.go:178] loaded client CA [0/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "admin-kubeconfig-signer" [] issuer="<self>" (2022-03-08 10:10:26 +0000 UTC to 2032-03-05 10:10:26 +0000 UTC (now=2022-03-08 11:04:50.70827973 +0000 UTC))
2022-03-08T11:04:50.708403468Z I0308 11:04:50.708390       1 tlsconfig.go:178] loaded client CA [1/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kubelet-signer" [] issuer="<self>" (2022-03-08 10:10:30 +0000 UTC to 2022-03-09 10:10:30 +0000 UTC (now=2022-03-08 11:04:50.708382216 +0000 UTC))
2022-03-08T11:04:50.708429400Z I0308 11:04:50.708420       1 tlsconfig.go:178] loaded client CA [2/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kube-control-plane-signer" [] issuer="<self>" (2022-03-08 10:10:30 +0000 UTC to 2023-03-08 10:10:30 +0000 UTC (now=2022-03-08 11:04:50.708414431 +0000 UTC))
2022-03-08T11:04:50.708454019Z I0308 11:04:50.708445       1 tlsconfig.go:178] loaded client CA [3/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kube-apiserver-to-kubelet-signer" [] issuer="<self>" (2022-03-08 10:10:31 +0000 UTC to 2023-03-08 10:10:31 +0000 UTC (now=2022-03-08 11:04:50.708439555 +0000 UTC))
2022-03-08T11:04:50.708477743Z I0308 11:04:50.708468       1 tlsconfig.go:178] loaded client CA [4/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kubelet-bootstrap-kubeconfig-signer" [] issuer="<self>" (2022-03-08 10:10:27 +0000 UTC to 2032-03-05 10:10:27 +0000 UTC (now=2022-03-08 11:04:50.708463536 +0000 UTC))
2022-03-08T11:04:50.708501611Z I0308 11:04:50.708492       1 tlsconfig.go:178] loaded client CA [5/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "kube-csr-signer_@1646735926" [] issuer="kubelet-signer" (2022-03-08 10:38:45 +0000 UTC to 2022-03-09 10:10:30 +0000 UTC (now=2022-03-08 11:04:50.708487283 +0000 UTC))
2022-03-08T11:04:50.708534481Z I0308 11:04:50.708525       1 tlsconfig.go:178] loaded client CA [6/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "openshift-kube-apiserver-operator_node-system-admin-signer@1646735931" [] issuer="<self>" (2022-03-08 10:38:50 +0000 UTC to 2023-03-08 10:38:51 +0000 UTC (now=2022-03-08 11:04:50.708519166 +0000 UTC))
2022-03-08T11:04:50.708558432Z I0308 11:04:50.708549       1 tlsconfig.go:178] loaded client CA [7/"client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"]: "aggregator-signer" [] issuer="<self>" (2022-03-08 10:10:28 +0000 UTC to 2022-03-09 10:10:28 +0000 UTC (now=2022-03-08 11:04:50.70854432 +0000 UTC))
2022-03-08T11:04:50.708737078Z I0308 11:04:50.708726       1 tlsconfig.go:200] loaded serving cert ["serving-cert::/tmp/serving-cert-113717963/tls.crt::/tmp/serving-cert-113717963/tls.key"]: "localhost" [serving] validServingFor=[localhost] issuer="check-endpoints-signer@1646737487" (2022-03-08 11:04:47 +0000 UTC to 2022-04-07 11:04:48 +0000 UTC (now=2022-03-08 11:04:50.708720054 +0000 UTC))
2022-03-08T11:04:50.708914421Z I0308 11:04:50.708903       1 named_certificates.go:53] loaded SNI cert [0/"self-signed loopback"]: "apiserver-loopback-client@1646737490" [serving] validServingFor=[apiserver-loopback-client] issuer="apiserver-loopback-client-ca@1646737490" (2022-03-08 10:04:50 +0000 UTC to 2023-03-08 10:04:50 +0000 UTC (now=2022-03-08 11:04:50.70889603 +0000 UTC))
2022-03-08T11:04:50.824979730Z I0308 11:04:50.824916       1 base_controller.go:72] Caches are synced for CheckEndpointsTimeToStart 
2022-03-08T11:04:50.825082859Z I0308 11:04:50.825060       1 base_controller.go:109] Starting #1 worker of CheckEndpointsTimeToStart controller ...
