I0723 15:16:22.650706       1 log.go:172] http: TLS handshake error from 10.128.2.16:51866: EOF
E0723 15:16:44.494035       1 errorpage.go:26] AuthenticationError: Code not valid

if [ -s /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt ]; then
              echo "Copying system trust bundle"
              cp -f /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
          fi
          exec authentication-operator operator --config=/var/run/configmaps/config/operator-config.yaml --v=2 --terminate-on-files=/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt

apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  name: cluster
spec:
  identityProviders:
  - mappingMethod: claim
    name: keycloak
    openID:
      ca:  <--- this section
        name:  <ConfigMap with keycloak certificate>
      claims:
        email:
        - email
        name:
        - name
        preferredUsername:
        - preferred_username
      clientID: openshift
      clientSecret:
        name: openid-client-secret-djbhz
      extraScopes: []
      issuer: https://keycloak-url
    type: OpenID

if [ -s /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt ]; then
              echo "Copying system trust bundle"
              cp -f /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
              echo "Copying service trust bundle"
              cat /var/run/configmaps/service-ca-bundle/service-ca.crt >> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
          fi
          exec authentication-operator operator --config=/var/run/configmaps/config/operator-config.yaml --v=2 --terminate-on-files=/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt

[root@hchenfly-inf ~]# oc version
Client Version: 4.3.13
Server Version: 4.3.13
Kubernetes Version: v1.16.2

[root@hchenfly-inf ~]# oc get pods -n openshift-authentication
NAME                               READY   STATUS             RESTARTS   AGE
oauth-openshift-795cf97644-b7m6n   0/1     CrashLoopBackOff   1          17s
oauth-openshift-7f8dd5d86d-9qbc4   0/1     CrashLoopBackOff   1          17s
oauth-openshift-855b8c64-pq97f     0/1     CrashLoopBackOff   1          17s
[root@hchenfly-inf ~]# oc logs -n openshift-authentication oauth-openshift-855b8c64-pq97f
Copying system trust bundle
cp: cannot remove '/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem': Permission denied

apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  annotations:
    release.openshift.io/create-only: 'true'
  creationTimestamp: '2019-07-29T19:12:50Z'
  generation: 19
  name: cluster
  resourceVersion: '250219'
  selfLink: /apis/config.openshift.io/v1/oauths/cluster
  uid: dbce3f57-b234-11e9-ba76-005056a5829d
spec:
  identityProviders:
    - mappingMethod: claim
      name: ibm
      openID:
        claims:
          email:
            - email
          name:
            - name
          preferredUsername:
            - preferred_username
        clientID: *****
        clientSecret:
          name: openid-client-secret-9z8dr
        issuer: 'https://w3id.sso.ibm.com/isam'
      type: OpenID

Update is failing. Cluster operator authentication is reporting a failure: Degraded: failed to apply IDP ibm config: failed to decode metadata: invalid character '<' looking for beginning of value. View Cluster Operators for more details.

E0730 09:33:40.282106       1 oauth.go:69] failed to honor IDP v1.IdentityProvider{Name:"ibm", MappingMethod:"claim", IdentityProviderConfig:v1.IdentityProviderConfig{Type:"OpenID", BasicAuth:(*v1.BasicAuthIdentityProvider)(nil), GitHub:(*v1.GitHubIdentityProvider)(nil), GitLab:(*v1.GitLabIdentityProvider)(nil), Google:(*v1.GoogleIdentityProvider)(nil), HTPasswd:(*v1.HTPasswdIdentityProvider)(nil), Keystone:(*v1.KeystoneIdentityProvider)(nil), LDAP:(*v1.LDAPIdentityProvider)(nil), OpenID:(*v1.OpenIDIdentityProvider)(0xc42098ab00), RequestHeader:(*v1.RequestHeaderIdentityProvider)(nil)}}: failed to decode metadata: invalid character '<' looking for beginning of value

$ oc get clusteroperators
NAME                                       VERSION                          AVAILABLE   PROGRESSING   DEGRADED   SINCE   MESSAGE
authentication                             4.10.0-0.okd-2022-03-07-131213   True        False         True       14h     CustomRouteControllerDegraded: Ingress.config.openshift.io "cluster" is invalid: [status.componentRoutes.currentHostnames: Invalid value: "oauth-openshift.apps.okd.ict620": status.componentRoutes.currentHostnames in body must be of type hostname: "oauth-openshift.apps.okd.ict620", status.componentRoutes.defaultHostname: Invalid value: "oauth-openshift.apps.okd.ict620": status.componentRoutes.defaultHostname in body must be of type hostname: "oauth-openshift.apps.okd.ict620"]...
baremetal                                  4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
cloud-controller-manager                   4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
cloud-credential                           4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
cluster-autoscaler                         4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
config-operator                            4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
console                                    4.10.0-0.okd-2022-03-07-131213   True        False         False      5h4m
csi-snapshot-controller                    4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
dns                                        4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
etcd                                       4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
image-registry                             4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
ingress                                    4.10.0-0.okd-2022-03-07-131213   True        False         False      5h4m
insights                                   4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
kube-apiserver                             4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
kube-controller-manager                    4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
kube-scheduler                             4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
kube-storage-version-migrator              4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
machine-api                                4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
machine-approver                           4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
machine-config                             4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
marketplace                                4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
monitoring                                 4.10.0-0.okd-2022-03-07-131213   True        False         False      38h
network                                    4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
node-tuning                                4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
openshift-apiserver                        4.10.0-0.okd-2022-03-07-131213   True        False         False      14h
openshift-controller-manager               4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
openshift-samples                          4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
operator-lifecycle-manager                 4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
operator-lifecycle-manager-catalog         4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
operator-lifecycle-manager-packageserver   4.10.0-0.okd-2022-03-07-131213   True        False         False      39h
service-ca                                 4.10.0-0.okd-2022-03-07-131213   True        False         False      40h
storage                                    4.10.0-0.okd-2022-03-07-131213   True        False         False      40h

$ ./openshift-install --dir ict-okd wait-for install-complete
INFO Waiting up to 40m0s (until 11:55AM) for the cluster at https://api.okd.ict620:6443 to initialize...
INFO Waiting up to 10m0s (until 11:25AM) for the openshift-console route to be created...
INFO Install complete!
INFO To access the cluster as the system:admin user when using 'oc', run 'export KUBECONFIG=/home/stream/openshift/ict-okd/auth/kubeconfig'
INFO Access the OpenShift web-console here: https://console-openshift-console.apps.okd.ict620
INFO Login to the console with user: "******", and password: "******"
INFO Time elapsed: 0s

CustomRouteControllerDegraded: Ingress.config.openshift.io "cluster" is invalid: [status.componentRoutes.currentHostnames: Invalid value: "oauth-openshift.apps.okd.ict620": status.componentRoutes.currentHostnames in body must be of type hostname: "oauth-openshift.apps.okd.ict620", status.componentRoutes.defaultHostname: Invalid value: "oauth-openshift.apps.okd.ict620": status.componentRoutes.defaultHostname in body must be of type hostname: "oauth-openshift.apps.okd.ict620"]
OAuthServerRouteEndpointAccessibleControllerDegraded: ingress.config/cluster does not yet have status for the "openshift-authentication/oauth-openshift" route

2021/06/10 07:42:17 server.go:96: [http] 192.168.30.101:56436 <-> oauth-openshift.apps.openshift.zz.local:443 [c] via ***.***.***.***:8080, 
error in dial: [http] can not connect remote address: oauth-openshift.apps.openshift.zz.local:443. error code: 503

sh-4.4# env | grep NO_PROXY
NO_PROXY=.cluster.local,.svc,.zz.local,oauth-openshift.apps.openshift.zz.local

2021-06-10T07:25:36.852124986+00:00 stderr F I0610 07:25:36.851991       1 request.go:668] Waited for 2.587263238s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system/secrets/kubeadmin
2021-06-10T07:25:38.051260934+00:00 stderr F I0610 07:25:38.051205       1 request.go:668] Waited for 2.196184297s due to client-side throttling, not priority and fairness, request: DELETE:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/encryption-config
2021-06-10T07:25:39.052030581+00:00 stderr F I0610 07:25:39.051901       1 request.go:668] Waited for 1.782880288s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-metadata
2021-06-10T07:25:40.052123592+00:00 stderr F I0610 07:25:40.051998       1 request.go:668] Waited for 1.791930805s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-cliconfig
2021-06-10T07:35:29.176269702+00:00 stderr F I0610 07:35:29.176226       1 request.go:668] Waited for 1.032187262s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config-managed/secrets/router-certs
2021-06-10T07:35:30.376324628+00:00 stderr F I0610 07:35:30.376247       1 request.go:668] Waited for 1.618937069s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-config/secrets/webhook-authentication-integrated-oauth
2021-06-10T07:35:31.376560351+00:00 stderr F I0610 07:35:31.376446       1 request.go:668] Waited for 1.997080649s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/secrets/v4-0-config-system-session
2021-06-10T07:35:32.376732953+00:00 stderr F I0610 07:35:32.376648       1 request.go:668] Waited for 2.391812071s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-metadata
2021-06-10T07:35:33.376750827+00:00 stderr F I0610 07:35:33.376696       1 request.go:668] Waited for 2.426829904s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver
2021-06-10T07:35:34.576035008+00:00 stderr F I0610 07:35:34.575988       1 request.go:668] Waited for 2.595683923s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/endpoints/oauth-openshift
2021-06-10T07:35:35.576654495+00:00 stderr F I0610 07:35:35.576520       1 request.go:668] Waited for 1.995346443s due to client-side throttling, not priority and fairness, request: DELETE:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/encryption-config
2021-06-10T07:35:36.776318219+00:00 stderr F I0610 07:35:36.776184       1 request.go:668] Waited for 1.993754073s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/services/api
2021-06-10T07:35:37.976966359+00:00 stderr F I0610 07:35:37.976919       1 request.go:668] Waited for 1.596880981s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/kube-system
2021-06-10T07:38:29.339042704+00:00 stderr F I0610 07:38:29.338965       1 request.go:668] Waited for 1.035359616s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca
2021-06-10T07:38:31.739780519+00:00 stderr F I0610 07:38:31.739650       1 request.go:668] Waited for 1.035100315s due to client-side throttling, not priority and fairness, request: GET:https://172.30.0.1:443/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca
2021-06-10T07:38:32.739951870+00:00 stderr F I0610 07:38:32.739820       1 request.go:668] Waited for 1.395485729s due to client-side throttling, not priority and fairness, request: DELETE:https://172.30.0.1:443/api/v1/namespaces/openshift-oauth-apiserver/secrets/encryption-config

[root@paas-dev masters]# oc version
Client Version: 4.6.1
Server Version: 4.6.1
Kubernetes Version: v1.19.0+d59ce34

NAME                                       VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE
authentication                             4.6.1     False       True          True       25h
cloud-credential                           4.6.1     True        False         False      4d10h
cluster-autoscaler                         4.6.1     True        False         False      4d5h
config-operator                            4.6.1     True        False         False      4d5h
console                                    4.6.1     False       True          True       34h
csi-snapshot-controller                    4.6.1     True        False         False      53m
dns                                        4.6.1     True        False         False      4d5h
etcd                                       4.6.1     True        False         False      4d5h
image-registry                             4.6.1     True        False         False      4d5h
ingress                                    4.6.1     True        False         False      4d4h
insights                                   4.6.1     True        False         False      4d5h
kube-apiserver                             4.6.1     True        False         False      4d5h
kube-controller-manager                    4.6.1     True        False         False      4d5h
kube-scheduler                             4.6.1     True        False         False      4d5h
kube-storage-version-migrator              4.6.1     True        False         False      4d4h
machine-api                                4.6.1     True        False         False      4d5h
machine-approver                           4.6.1     True        False         False      4d5h
machine-config                             4.6.1     True        False         False      3h49m
marketplace                                4.6.1     True        False         False      50m
monitoring                                 4.6.1     True        False         False      48m
network                                    4.6.1     True        False         False      4d5h
node-tuning                                4.6.1     True        False         False      4d5h
openshift-apiserver                        4.6.1     True        False         False      54m
openshift-controller-manager               4.6.1     True        False         False      4d5h
openshift-samples                          4.6.1     True        False         False      4d5h
operator-lifecycle-manager                 4.6.1     True        False         False      4d5h
operator-lifecycle-manager-catalog         4.6.1     True        False         False      4d5h
operator-lifecycle-manager-packageserver   4.6.1     True        False         False      48m
service-ca                                 4.6.1     True        False         False      4d5h
storage                                    4.6.1     True        False         False      4d5h

[root@gvapaas-dev-bastion1 install_07122020]# oc get pods
NAME                         READY   STATUS    RESTARTS   AGE
console-574b85c888-77j6q     0/1     Running   15         73m
console-64cd86cd6c-5wxzk     0/1     Running   15         73m
console-9bbf5899-pjdzf       0/1     Running   14         68m
downloads-85df645c7c-8nr7h   1/1     Running   0          2d3h
downloads-85df645c7c-n8jcq   1/1     Running   0          2d3h

2020-12-11T20:02:22Z auth: error contacting auth provider (retrying in 10s): request to OAuth issuer endpoint https://oauth-openshift.apps.ocp-dev.mydomain.com/oauth/token failed: Head "https://oauth-openshift.apps.ocp-dev.mydomain.com": read tcp 10.129.0.17:46794->192.168.10.10:443: read: connection reset by peer

[root@paas-dev masters]# oc get pods -n openshift-authentication
NAME                               READY   STATUS    RESTARTS   AGE
oauth-openshift-6dbc889fc8-96wbj   1/1     Running   0          55m
oauth-openshift-6dbc889fc8-mxhmp   1/1     Running   0          58m

[root@paas-dev masters]# oc get pods -n openshift-authentication-operator
NAME                                       READY   STATUS    RESTARTS   AGE
authentication-operator-5d575b6f8b-9q8jz   1/1     Running   0          55m

E1211 19:47:18.497520       1 base_controller.go:250] "OAuthRouteCheckEndpointAccessibleController" controller failed to sync "key", err: "https://oauth-openshift.apps.ocp-dev.mydomain/healthz" returned "503 Service Unavailable"

NAME                        HOST/PORT                                            PATH   SERVICES          PORT   TERMINATION            WILDCARD
oauth-openshift             oauth-openshift.apps.ocp-dev.corp.sch.ch                    oauth-openshift   6443   passthrough/Redirect   None

NAME                        HOST/PORT                                            PATH   SERVICES          PORT   TERMINATION            WILDCARD
oauth-openshift             oauth-openshift.apps.ocp-dev.corp.sch.ch                    oauth-openshift   6443   reencrypt/Redirect   None

apiVersion: config.openshift.io/v1
kind: ClusterOperator
metadata:
  annotations:
    exclude.release.openshift.io/internal-openshift-hosted: "true"
    include.release.openshift.io/self-managed-high-availability: "true"
  creationTimestamp: "2021-02-07T01:48:11Z"
  generation: 1
  managedFields:
  - apiVersion: config.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:exclude.release.openshift.io/internal-openshift-hosted: {}
          f:include.release.openshift.io/self-managed-high-availability: {}
      f:spec: {}
      f:status:
        .: {}
        f:extension: {}
    manager: cluster-version-operator
    operation: Update
    time: "2021-02-07T01:48:11Z"
  - apiVersion: config.openshift.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions: {}
        f:relatedObjects: {}
        f:versions: {}
    manager: authentication-operator
    operation: Update
    time: "2021-02-07T04:13:17Z"
  name: authentication
  resourceVersion: "55392"
  selfLink: /apis/config.openshift.io/v1/clusteroperators/authentication
  uid: 75fdd654-5936-4c33-8515-7afc08302eb8
spec: {}
status:
  conditions:
  - lastTransitionTime: "2021-02-07T01:54:41Z"
    message: |-
      APIServerDeploymentDegraded: 1 of 3 requested instances are unavailable for apiserver.openshift-oauth-apiserver ()
      WellKnownReadyControllerDegraded: kube-apiserver oauth endpoint https://192.168.1.179:6443/.well-known/oauth-authorization-server is not yet served and authentication operator keeps waiting (check kube-apiserver operator, and check that instances roll out successfully, which can take several minutes per instance)
    reason: APIServerDeployment_UnavailablePod::WellKnownReadyController_SyncError
    status: "True"
    type: Degraded
  - lastTransitionTime: "2021-02-07T04:13:17Z"
    reason: AsExpected
    status: "False"
    type: Progressing
  - lastTransitionTime: "2021-02-07T01:52:41Z"
    message: 'WellKnownAvailable: The well-known endpoint is not yet available: kube-apiserver
      oauth endpoint https://192.168.1.179:6443/.well-known/oauth-authorization-server
      is not yet served and authentication operator keeps waiting (check kube-apiserver
      operator, and check that instances roll out successfully, which can take several
      minutes per instance)'
    reason: WellKnown_NotReady
    status: "False"
    type: Available
  - lastTransitionTime: "2021-02-07T01:52:42Z"
    reason: AsExpected
    status: "True"
    type: Upgradeable
  extension: null
  relatedObjects:
  - group: operator.openshift.io
    name: cluster
    resource: authentications
  - group: config.openshift.io
    name: cluster
    resource: authentications
  - group: config.openshift.io
    name: cluster
    resource: infrastructures
  - group: config.openshift.io
    name: cluster
    resource: oauths
  - group: route.openshift.io
    name: oauth-openshift
    namespace: openshift-authentication
    resource: routes
  - group: ""
    name: oauth-openshift
    namespace: openshift-authentication
    resource: services
  - group: ""
    name: openshift-config
    resource: namespaces
  - group: ""
    name: openshift-config-managed
    resource: namespaces
  - group: ""
    name: openshift-authentication
    resource: namespaces
  - group: ""
    name: openshift-authentication-operator
    resource: namespaces
  - group: ""
    name: openshift-ingress
    resource: namespaces
  - group: ""
    name: openshift-oauth-apiserver
    resource: namespaces
  versions:
  - name: oauth-apiserver
    version: 4.6.8
  - name: oauth-openshift
    version: 4.6.8_openshift
  - name: operator

version: 4.6.8

$ openshift-install wait-for install-complete --log-level debug
<snip>
DEBUG Still waiting for the cluster to initialize: Some cluster operators are still updating: authentication, console

$ oc get clusteroperator authentication
NAME             VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE
authentication             Unknown     Unknown       True       56m

$ openshift-install version
openshift-install v4.1.12-201908150609-dirty
built from commit c67fe4d87dcb325a374d8438e3b8f31eb3ac6f2a
release image quay.io/openshift-release-dev/ocp-release@sha256:c28afba66cc09233f7dfa49177423e124d939cf5b0cd60d71bbb918edb0ed739

$ oc get nodes
NAME                     STATUS   ROLES    AGE   VERSION
master0.ocp67.nrgy.lan   Ready    master   63m   v1.13.4+d81afa6ba
master1.ocp67.nrgy.lan   Ready    master   63m   v1.13.4+d81afa6ba
master2.ocp67.nrgy.lan   Ready    master   63m   v1.13.4+d81afa6ba
worker0.ocp67.nrgy.lan   Ready    worker   63m   v1.13.4+d81afa6ba
worker1.ocp67.nrgy.lan   Ready    worker   63m   v1.13.4+d81afa6ba

$ oc get co
NAME                                 VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE
authentication                                 Unknown     Unknown       True       59m
cloud-credential                     4.1.12    True        False         False      62m
cluster-autoscaler                   4.1.12    True        False         False      62m
console                              4.1.12    False       True          False      58m
dns                                  4.1.12    True        False         False      62m
image-registry                       4.1.12    True        False         False      55m
ingress                              4.1.12    True        False         False      57m
kube-apiserver                       4.1.12    True        False         False      61m
kube-controller-manager              4.1.12    True        False         False      59m
kube-scheduler                       4.1.12    True        False         False      59m
machine-api                          4.1.12    True        False         False      62m
machine-config                       4.1.12    True        False         False      61m
marketplace                          4.1.12    True        False         False      57m
monitoring                           4.1.12    True        False         False      56m
network                              4.1.12    True        False         False      62m
node-tuning                          4.1.12    True        False         False      59m
openshift-apiserver                  4.1.12    True        False         False      59m
openshift-controller-manager         4.1.12    True        False         False      61m
openshift-samples                    4.1.12    True        False         False      56m
operator-lifecycle-manager           4.1.12    True        False         False      61m
operator-lifecycle-manager-catalog   4.1.12    True        False         False      61m
service-ca                           4.1.12    True        False         False      61m
service-catalog-apiserver            4.1.12    True        False         False      59m
service-catalog-controller-manager   4.1.12    True        False         False      59m
storage                              4.1.12    True        False         False      58m

$ oc get co authentication -oyaml
apiVersion: config.openshift.io/v1
kind: ClusterOperator
metadata:
  creationTimestamp: "2019-08-19T13:48:19Z"
  generation: 1
  name: authentication
  resourceVersion: "20374"
  selfLink: /apis/config.openshift.io/v1/clusteroperators/authentication
  uid: 008db2ad-c288-11e9-abef-00505686b42b
spec: {}
status:
  conditions:
  - lastTransitionTime: "2019-08-19T13:50:53Z"
    message: 'RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout'
    reason: RouteHealthDegradedError
    status: "True"
    type: Degraded
  - lastTransitionTime: "2019-08-19T13:48:19Z"
    reason: NoData
    status: Unknown
    type: Progressing
  - lastTransitionTime: "2019-08-19T13:48:19Z"
    reason: NoData
    status: Unknown
    type: Available
  - lastTransitionTime: "2019-08-19T13:48:19Z"
    reason: AsExpected
    status: "True"
    type: Upgradeable
  extension: null
  relatedObjects:
  - group: operator.openshift.io
    name: cluster
    resource: authentications
  - group: config.openshift.io
    name: cluster
    resource: authentications
  - group: config.openshift.io
    name: cluster
    resource: infrastructures
  - group: config.openshift.io
    name: cluster
    resource: oauths
  - group: ""
    name: openshift-config
    resource: namespaces
  - group: ""
    name: openshift-config-managed
    resource: namespaces
  - group: ""
    name: openshift-authentication
    resource: namespaces
  - group: ""
    name: openshift-authentication-operator
    resource: namespaces

$ oc get pods --all-namespaces | grep -i auth
openshift-authentication-operator                       authentication-operator-65b84f95d4-btv85                          1/1     Running            0          62m
openshift-authentication                                oauth-openshift-dfffdbc88-q7w7x                                   1/1     Running            0          60m
openshift-authentication                                oauth-openshift-dfffdbc88-sf9dp                                   1/1     Running            0          60m

$ oc logs authentication-operator-65b84f95d4-btv85 -n openshift-authentication-operator
I0819 13:48:16.320719       1 cmd.go:160] Using service-serving-cert provided certificates
I0819 13:48:16.333142       1 observer_polling.go:106] Starting file observer
I0819 13:48:18.908674       1 secure_serving.go:116] Serving securely on 0.0.0.0:8443
I0819 13:48:18.911107       1 leaderelection.go:205] attempting to acquire leader lease  openshift-authentication-operator/cluster-authentication-operator-lock...
I0819 13:48:18.955683       1 leaderelection.go:214] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock
I0819 13:48:18.994621       1 event.go:221] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"00646f22-c288-11e9-abef-00505686b42b", APIVersion:"v1", ResourceVersion:"15750", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' 005f7db3-c288-11e9-ac7f-0a580afe040c became leader
I0819 13:48:19.040566       1 remove_stale_conditions.go:71] Starting RemoveStaleConditions
I0819 13:48:19.088713       1 resourcesync_controller.go:219] Starting ResourceSyncController
I0819 13:48:19.089275       1 controller.go:53] Starting AuthenticationOperator2
I0819 13:48:19.089295       1 status_controller.go:187] Starting StatusSyncer-authentication
I0819 13:48:19.089304       1 unsupportedconfigoverrides_controller.go:151] Starting UnsupportedConfigOverridesController
I0819 13:48:19.089313       1 logging_controller.go:82] Starting LogLevelController
I0819 13:48:19.089322       1 management_state_controller.go:99] Starting management-state-controller-authentication
I0819 13:48:19.196312       1 status_controller.go:108] clusteroperator/authentication not found
I0819 13:48:19.228898       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Upgradeable"}],"relatedObjects":[{"group":"operator.openshift.io","name":"cluster","resource":"authentications"},{"group":"config.openshift.io","name":"cluster","resource":"authentications"},{"group":"config.openshift.io","name":"cluster","resource":"infrastructures"},{"group":"config.openshift.io","name":"cluster","resource":"oauths"},{"group":"","name":"openshift-config","resource":"namespaces"},{"group":"","name":"openshift-config-managed","resource":"namespaces"},{"group":"","name":"openshift-authentication","resource":"namespaces"},{"group":"","name":"openshift-authentication-operator","resource":"namespaces"}]}}
I0819 13:48:19.245497       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Upgradeable"}]}}
I0819 13:48:19.261871       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I0819 13:48:19.268623       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded changed from Unknown to False ("")
I0819 13:48:19.297284       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Upgradeable changed from Unknown to True ("")
I0819 13:48:19.512472       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:48:19Z","message":"RouteStatusDegraded: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
E0819 13:48:19.524503       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
I0819 13:48:19.564443       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "" to "RouteStatusDegraded: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []"
E0819 13:48:19.733390       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:19.956916       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:20.101491       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:20.327844       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:20.499150       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:20.708373       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:20.897823       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:21.185658       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:22.495211       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:25.114348       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:30.269628       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:48:40.518573       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
E0819 13:49:01.013881       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
I0819 13:49:24.479039       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:49:24Z","message":"RouteStatusDegraded: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []","reason":"RouteStatusDegradedError","status":"True","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I0819 13:49:24.505383       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded changed from False to True ("RouteStatusDegraded: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []")
I0819 13:49:30.975608       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'SecretCreated' Created Secret/v4-0-config-system-router-certs -n openshift-authentication because it was missing
E0819 13:49:31.046439       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
I0819 13:49:31.388187       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'SecretUpdated' Updated Secret/v4-0-config-system-router-certs -n openshift-authentication because it changed
E0819 13:49:31.404479       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp67.nrgy.lan: []
I0819 13:49:39.001252       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConfigMapCreated' Created ConfigMap/v4-0-config-system-metadata -n openshift-authentication because it was missing
I0819 13:49:39.018148       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConfigMapCreated' Created ConfigMap/oauth-openshift -n openshift-config-managed because it was missing
I0819 13:49:39.062550       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/oauth-openshift -n openshift-authentication because it was missing
E0819 13:49:39.132951       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling service CA: config map has no service ca data: &v1.ConfigMap{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"v4-0-config-system-service-ca", GenerateName:"", Namespace:"openshift-authentication", SelfLink:"/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca", UID:"3029cb8c-c288-11e9-abef-00505686b42b", ResourceVersion:"19121", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63701819379, loc:(*time.Location)(0x2b543c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app":"oauth-openshift"}, Annotations:map[string]string{"service.alpha.openshift.io/inject-cabundle":"true"}, OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:""}, Data:map[string]string(nil), BinaryData:map[string][]uint8(nil)}
I0819 13:49:39.133340       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:49:39Z","message":"OperatorSyncDegraded: failed handling service CA: config map has no service ca data: \u0026v1.ConfigMap{TypeMeta:v1.TypeMeta{Kind:\"\", APIVersion:\"\"}, ObjectMeta:v1.ObjectMeta{Name:\"v4-0-config-system-service-ca\", GenerateName:\"\", Namespace:\"openshift-authentication\", SelfLink:\"/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca\", UID:\"3029cb8c-c288-11e9-abef-00505686b42b\", ResourceVersion:\"19121\", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63701819379, loc:(*time.Location)(0x2b543c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{\"app\":\"oauth-openshift\"}, Annotations:map[string]string{\"service.alpha.openshift.io/inject-cabundle\":\"true\"}, OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:\"\"}, Data:map[string]string(nil), BinaryData:map[string][]uint8(nil)}","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I0819 13:49:39.182297       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded changed from True to False ("OperatorSyncDegraded: failed handling service CA: config map has no service ca data: &v1.ConfigMap{TypeMeta:v1.TypeMeta{Kind:\"\", APIVersion:\"\"}, ObjectMeta:v1.ObjectMeta{Name:\"v4-0-config-system-service-ca\", GenerateName:\"\", Namespace:\"openshift-authentication\", SelfLink:\"/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca\", UID:\"3029cb8c-c288-11e9-abef-00505686b42b\", ResourceVersion:\"19121\", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63701819379, loc:(*time.Location)(0x2b543c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{\"app\":\"oauth-openshift\"}, Annotations:map[string]string{\"service.alpha.openshift.io/inject-cabundle\":\"true\"}, OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:\"\"}, Data:map[string]string(nil), BinaryData:map[string][]uint8(nil)}")
I0819 13:49:41.398033       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'SecretCreated' Created Secret/v4-0-config-system-session -n openshift-authentication because it was missing
I0819 13:49:42.593332       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConfigMapCreated' Created ConfigMap/v4-0-config-system-cliconfig -n openshift-authentication because it was missing
I0819 13:49:43.225903       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/oauth-openshift -n openshift-authentication because it was missing
E0819 13:49:53.830797       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
I0819 13:49:53.833427       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:49:39Z","message":"RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I0819 13:49:53.850122       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "OperatorSyncDegraded: failed handling service CA: config map has no service ca data: &v1.ConfigMap{TypeMeta:v1.TypeMeta{Kind:\"\", APIVersion:\"\"}, ObjectMeta:v1.ObjectMeta{Name:\"v4-0-config-system-service-ca\", GenerateName:\"\", Namespace:\"openshift-authentication\", SelfLink:\"/api/v1/namespaces/openshift-authentication/configmaps/v4-0-config-system-service-ca\", UID:\"3029cb8c-c288-11e9-abef-00505686b42b\", ResourceVersion:\"19121\", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63701819379, loc:(*time.Location)(0x2b543c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{\"app\":\"oauth-openshift\"}, Annotations:map[string]string{\"service.alpha.openshift.io/inject-cabundle\":\"true\"}, OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:\"\"}, Data:map[string]string(nil), BinaryData:map[string][]uint8(nil)}" to "RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout"
E0819 13:50:04.680965       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 13:50:15.501485       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 13:50:26.137654       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
I0819 13:50:53.258459       1 status_controller.go:164] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-08-19T13:50:53Z","message":"RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout","reason":"RouteHealthDegradedError","status":"True","type":"Degraded"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Progressing"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"NoData","status":"Unknown","type":"Available"},{"lastTransitionTime":"2019-08-19T13:48:19Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I0819 13:50:53.270878       1 event.go:221] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"6d3d24c2-c287-11e9-88f5-00505686d413", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded changed from False to True ("RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout")
W0819 13:53:52.210443       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 19166 (22162)
E0819 13:54:03.822680       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823021       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823199       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823290       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823510       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823686       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.824127       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.824587       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.825027       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.825372       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.825921       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.826377       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823688       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823761       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823771       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823779       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823787       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
E0819 13:54:03.823796       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=721, ErrCode=NO_ERROR, debug=""
W0819 13:54:04.379908       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 19339 (22240)
W0819 13:54:04.380108       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 19339 (22240)
W0819 13:54:04.407809       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 15767 (22240)
W0819 13:54:04.408028       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.Ingress ended with: too old resource version: 12822 (17773)
W0819 13:54:04.408157       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.Infrastructure ended with: too old resource version: 12721 (17513)
W0819 13:54:04.415323       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.OAuth ended with: too old resource version: 12917 (18068)
E0819 13:54:17.002839       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 13:54:27.698544       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 13:55:48.841770       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.842107       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.842291       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.868467       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.872949       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.907020       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.907388       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.943854       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.944179       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.944364       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.949162       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.955760       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.959776       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.960022       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:48.967948       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:49.009511       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:49.040388       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
E0819 13:55:49.040695       1 streamwatcher.go:109] Unable to decode an event from the watch stream: http2: server sent GOAWAY and closed the connection; LastStreamID=255, ErrCode=NO_ERROR, debug=""
W0819 13:55:49.129882       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.Deployment ended with: too old resource version: 19741 (22400)
W0819 13:55:49.130020       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.Authentication ended with: too old resource version: 19111 (23156)
W0819 13:55:49.130095       1 reflector.go:270] github.com/openshift/client-go/operator/informers/externalversions/factory.go:101: watch of *v1.Authentication ended with: too old resource version: 19805 (23063)
W0819 13:55:49.130123       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.Secret ended with: too old resource version: 23208 (23253)
W0819 13:55:49.130176       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.OAuth ended with: too old resource version: 18068 (23173)
W0819 13:55:49.130234       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.ClusterOperator ended with: too old resource version: 23112 (23172)
W0819 13:55:49.130287       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.Ingress ended with: too old resource version: 17773 (23103)
W0819 13:55:49.130318       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 22319 (23415)
W0819 13:55:49.130372       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.Console ended with: too old resource version: 19162 (23063)
W0819 13:55:49.137393       1 reflector.go:270] github.com/openshift/client-go/config/informers/externalversions/factory.go:101: watch of *v1.Infrastructure ended with: too old resource version: 17513 (23207)
W0819 13:55:49.137466       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 22380 (23415)
W0819 13:55:49.137494       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 22380 (23415)
W0819 13:55:49.143569       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.Service ended with: too old resource version: 19200 (22390)
W0819 13:55:49.232128       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 22380 (23415)
E0819 13:56:02.572971       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 13:56:13.263584       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:00:59.820225       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:01:03.155379       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 23547 (24879)
W0819 14:01:51.150011       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 23547 (25079)
W0819 14:02:03.169187       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 23547 (25134)
W0819 14:03:09.534351       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 23549 (25407)
E0819 14:03:21.358807       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:05:44.257331       1 reflector.go:270] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
E0819 14:05:55.896932       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:08:30.179637       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:08:40.811089       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:09:04.160943       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 25007 (26972)
W0819 14:09:10.173289       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 25264 (26990)
W0819 14:10:00.538922       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 25536 (27222)
E0819 14:10:12.363241       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:10:25.136686       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.Deployment ended with: too old resource version: 23103 (24472)
W0819 14:10:36.155019       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 25204 (27398)
E0819 14:10:36.771666       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:14:16.166383       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 27101 (28346)
W0819 14:15:35.543247       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 27371 (28720)
W0819 14:15:39.159295       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 27525 (28731)
W0819 14:15:39.301731       1 reflector.go:270] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
E0819 14:15:47.363069       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:15:57.994778       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:16:08.624141       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:17:23.177068       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 27121 (29167)
E0819 14:17:50.460124       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:21:41.175295       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 28484 (30312)
W0819 14:22:34.182029       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 29303 (30546)
W0819 14:23:47.373889       1 reflector.go:270] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
E0819 14:23:59.015309       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:24:56.142621       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.Deployment ended with: too old resource version: 27309 (28443)
W0819 14:25:06.547549       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 28846 (31226)
E0819 14:25:07.776852       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:25:18.407211       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:25:24.163326       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 28857 (31320)
W0819 14:27:08.179903       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 30439 (31756)
E0819 14:28:30.181649       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:29:17.186235       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 30674 (32300)
W0819 14:32:07.551712       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 31371 (33078)
E0819 14:32:19.385124       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:32:20.459979       1 reflector.go:270] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
E0819 14:32:32.099320       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:33:19.167224       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 31448 (33377)
E0819 14:34:41.096673       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:35:50.184791       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 31882 (34052)
E0819 14:36:01.386717       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:36:12.026533       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:38:31.192263       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 32440 (34749)
W0819 14:39:22.556434       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 33205 (34964)
E0819 14:39:34.419279       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:42:05.544860       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 34191 (35703)
W0819 14:42:22.174548       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 33508 (35781)
W0819 14:44:41.149306       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.Deployment ended with: too old resource version: 31278 (32597)
E0819 14:44:52.782124       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:44:54.560161       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 35108 (36442)
E0819 14:45:06.387927       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:46:54.198914       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 34875 (36970)
W0819 14:48:10.549384       1 reflector.go:270] k8s.io/client-go/informers/factory.go:132: watch of *v1.ConfigMap ended with: too old resource version: 35843 (37298)
E0819 14:48:30.180644       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
E0819 14:48:40.819468       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
W0819 14:49:41.504229       1 reflector.go:270] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
E0819 14:49:53.147333       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout

$ oc logs oauth-openshift-dfffdbc88-q7w7x -n openshift-authentication
Command "openshift-osinserver" is deprecated, will be removed in 4.0
I0819 13:49:52.695973       1 clientca.go:92] [0] "/tmp/requestheader-client-ca-file771429603" client-ca certificate: "aggregator-signer" [] issuer="<self>" (2019-08-19 13:30:35 +0000 UTC to 2019-08-20 13:30:35 +0000 UTC (now=2019-08-19 13:49:52.695950863 +0000 UTC))
I0819 13:49:52.696928       1 clientca.go:92] [0] "/tmp/client-ca-file728276116" client-ca certificate: "admin-kubeconfig-signer" [] issuer="<self>" (2019-08-19 13:30:31 +0000 UTC to 2029-08-16 13:30:31 +0000 UTC (now=2019-08-19 13:49:52.696908068 +0000 UTC))
I0819 13:49:52.696999       1 clientca.go:92] [1] "/tmp/client-ca-file728276116" client-ca certificate: "kube-csr-signer_@1566222323" [] issuer="kubelet-signer" (2019-08-19 13:45:22 +0000 UTC to 2019-08-20 13:30:38 +0000 UTC (now=2019-08-19 13:49:52.696987669 +0000 UTC))
I0819 13:49:52.697069       1 clientca.go:92] [2] "/tmp/client-ca-file728276116" client-ca certificate: "kubelet-signer" [] issuer="<self>" (2019-08-19 13:30:38 +0000 UTC to 2019-08-20 13:30:38 +0000 UTC (now=2019-08-19 13:49:52.697056462 +0000 UTC))
I0819 13:49:52.697112       1 clientca.go:92] [3] "/tmp/client-ca-file728276116" client-ca certificate: "kube-apiserver-to-kubelet-signer" [] issuer="<self>" (2019-08-19 13:30:39 +0000 UTC to 2020-08-18 13:30:39 +0000 UTC (now=2019-08-19 13:49:52.697103253 +0000 UTC))
I0819 13:49:52.697154       1 clientca.go:92] [4] "/tmp/client-ca-file728276116" client-ca certificate: "kube-control-plane-signer" [] issuer="<self>" (2019-08-19 13:30:39 +0000 UTC to 2020-08-18 13:30:39 +0000 UTC (now=2019-08-19 13:49:52.697145653 +0000 UTC))
I0819 13:49:52.704670       1 secure_serving.go:66] Forcing use of http/1.1 only
I0819 13:49:52.705938       1 serving.go:195] [0] "/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt" serving certificate: "oauth-openshift.openshift-authentication.svc" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer="openshift-service-serving-signer@1566222339" (2019-08-19 13:49:39 +0000 UTC to 2021-08-18 13:49:40 +0000 UTC (now=2019-08-19 13:49:52.70592379 +0000 UTC))
I0819 13:49:52.706081       1 serving.go:195] [1] "/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt" serving certificate: "openshift-service-serving-signer@1566222339" [] issuer="<self>" (2019-08-19 13:45:39 +0000 UTC to 2020-08-18 13:45:40 +0000 UTC (now=2019-08-19 13:49:52.706068423 +0000 UTC))
I0819 13:49:52.706151       1 secure_serving.go:136] Serving securely on 0.0.0.0:6443
I0819 13:49:52.706295       1 serving.go:77] Starting DynamicLoader
I0819 13:49:52.708998       1 clientca.go:58] Starting DynamicCA: /tmp/requestheader-client-ca-file771429603
I0819 13:49:52.710449       1 clientca.go:58] Starting DynamicCA: /tmp/client-ca-file728276116
I0819 13:51:20.768404       1 log.go:172] http: TLS handshake error from 10.254.0.1:56006: EOF

$ oc logs oauth-openshift-dfffdbc88-sf9dp -n openshift-authentication
Command "openshift-osinserver" is deprecated, will be removed in 4.0
I0819 13:49:53.334362       1 clientca.go:92] [0] "/tmp/requestheader-client-ca-file223858105" client-ca certificate: "aggregator-signer" [] issuer="<self>" (2019-08-19 13:30:35 +0000 UTC to 2019-08-20 13:30:35 +0000 UTC (now=2019-08-19 13:49:53.334325767 +0000 UTC))
I0819 13:49:53.334762       1 clientca.go:92] [0] "/tmp/client-ca-file491355458" client-ca certificate: "admin-kubeconfig-signer" [] issuer="<self>" (2019-08-19 13:30:31 +0000 UTC to 2029-08-16 13:30:31 +0000 UTC (now=2019-08-19 13:49:53.334750442 +0000 UTC))
I0819 13:49:53.334786       1 clientca.go:92] [1] "/tmp/client-ca-file491355458" client-ca certificate: "kube-csr-signer_@1566222323" [] issuer="kubelet-signer" (2019-08-19 13:45:22 +0000 UTC to 2019-08-20 13:30:38 +0000 UTC (now=2019-08-19 13:49:53.33477837 +0000 UTC))
I0819 13:49:53.334799       1 clientca.go:92] [2] "/tmp/client-ca-file491355458" client-ca certificate: "kubelet-signer" [] issuer="<self>" (2019-08-19 13:30:38 +0000 UTC to 2019-08-20 13:30:38 +0000 UTC (now=2019-08-19 13:49:53.334792144 +0000 UTC))
I0819 13:49:53.334810       1 clientca.go:92] [3] "/tmp/client-ca-file491355458" client-ca certificate: "kube-apiserver-to-kubelet-signer" [] issuer="<self>" (2019-08-19 13:30:39 +0000 UTC to 2020-08-18 13:30:39 +0000 UTC (now=2019-08-19 13:49:53.334804261 +0000 UTC))
I0819 13:49:53.334821       1 clientca.go:92] [4] "/tmp/client-ca-file491355458" client-ca certificate: "kube-control-plane-signer" [] issuer="<self>" (2019-08-19 13:30:39 +0000 UTC to 2020-08-18 13:30:39 +0000 UTC (now=2019-08-19 13:49:53.334815107 +0000 UTC))
I0819 13:49:53.358022       1 secure_serving.go:66] Forcing use of http/1.1 only
I0819 13:49:53.360002       1 serving.go:195] [0] "/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt" serving certificate: "oauth-openshift.openshift-authentication.svc" [serving] validServingFor=[oauth-openshift.openshift-authentication.svc,oauth-openshift.openshift-authentication.svc.cluster.local] issuer="openshift-service-serving-signer@1566222339" (2019-08-19 13:49:39 +0000 UTC to 2021-08-18 13:49:40 +0000 UTC (now=2019-08-19 13:49:53.3599828 +0000 UTC))
I0819 13:49:53.360023       1 serving.go:195] [1] "/var/config/system/secrets/v4-0-config-system-serving-cert/tls.crt" serving certificate: "openshift-service-serving-signer@1566222339" [] issuer="<self>" (2019-08-19 13:45:39 +0000 UTC to 2020-08-18 13:45:40 +0000 UTC (now=2019-08-19 13:49:53.360014519 +0000 UTC))
I0819 13:49:53.360086       1 secure_serving.go:136] Serving securely on 0.0.0.0:6443
I0819 13:49:53.360212       1 serving.go:77] Starting DynamicLoader
I0819 13:49:53.366408       1 clientca.go:58] Starting DynamicCA: /tmp/requestheader-client-ca-file223858105
I0819 13:49:53.366713       1 clientca.go:58] Starting DynamicCA: /tmp/client-ca-file491355458

$ oc get routes.route.openshift.io --all-namespaces
NAMESPACE                  NAME                HOST/PORT                                                    PATH   SERVICES            PORT    TERMINATION            WILDCARD
openshift-authentication   oauth-openshift     oauth-openshift.apps.ocp67.nrgy.lan                                 oauth-openshift     6443    passthrough/Redirect   None
openshift-console          console             console-openshift-console.apps.ocp67.nrgy.lan                       console             https   reencrypt/Redirect     None
openshift-console          downloads           downloads-openshift-console.apps.ocp67.nrgy.lan                     downloads           http    edge                   None
openshift-monitoring       alertmanager-main   alertmanager-main-openshift-monitoring.apps.ocp67.nrgy.lan          alertmanager-main   web     reencrypt/Redirect     None
openshift-monitoring       grafana             grafana-openshift-monitoring.apps.ocp67.nrgy.lan                    grafana             https   reencrypt/Redirect     None
openshift-monitoring       prometheus-k8s      prometheus-k8s-openshift-monitoring.apps.ocp67.nrgy.lan             prometheus-k8s      web     reencrypt/Redirect     None

E1215 13:41:23.520778       1 login.go:171] Error authenticating "tf" with provider "ldap": LDAP Result Code 200 "Network Error": x509: certificate relies on legacy Common Name field, use SANs or temporarily enable Common Name matching with GODEBUG=x509ignoreCN=0                                                                           

[root@support tmp]# oc get co
NAME                                       VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE
authentication                                       Unknown     Unknown       True       23h
cloud-credential                           4.3.29    True        False         False      26h
cluster-autoscaler                         4.3.29    True        False         False      23h
console                                    4.3.29    True        False         False      4h8m
....

oc get clusterversion
NAME      VERSION   AVAILABLE   PROGRESSING   SINCE   STATUS
version             False       True          26h     Unable to apply 4.3.29: the cluster operator authentication has not yet successfully rolled out

oc describe co authentication
Name:         authentication
Namespace:
Labels:       <none>
Annotations:  <none>
API Version:  config.openshift.io/v1
Kind:         ClusterOperator
Metadata:
  Creation Timestamp:  2020-08-04T11:47:35Z
  Generation:          1
  Resource Version:    380628
  Self Link:           /apis/config.openshift.io/v1/clusteroperators/authentication
  UID:                 8ffd7d5c-9fd2-443e-ac8a-de8724988dc7
Spec:
Status:
  Conditions:
    Last Transition Time:  2020-08-04T12:16:16Z
    Message:               RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout
    Reason:                RouteHealthDegradedFailedGet
    Status:                True
    Type:                  Degraded
    Last Transition Time:  2020-08-04T11:47:35Z
    Reason:                NoData
    Status:                Unknown
    Type:                  Progressing
.....

oc get describe co/authentication
Name:         authentication
Namespace:    
Labels:       <none>
Annotations:  <none>
API Version:  config.openshift.io/v1
Kind:         ClusterOperator
Metadata:
  Creation Timestamp:  2020-08-04T11:47:35Z
  Generation:          1
  Resource Version:    26914
  Self Link:           /apis/config.openshift.io/v1/clusteroperators/authentication
  UID:                 8ffd7d5c-9fd2-443e-ac8a-de8724988dc7
Spec:
Status:
  Conditions:
    Last Transition Time:  2020-08-04T12:16:16Z
    Message:               RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout
    Reason:                RouteHealthDegradedFailedGet
    Status:                True
    Type:                  Degraded
    Last Transition Time:  2020-08-04T11:47:35Z
    Reason:                NoData
    Status:                Unknown
    Type:                  Progressing

[root@support tmp]# oc logs authentication-operator-5d9d9d49fd-chkqt -n openshift-authentication-operator
Copying system trust bundle
I0804 11:49:32.801173       1 cmd.go:188] Using service-serving-cert provided certificates
I0804 11:49:32.821707       1 observer_polling.go:137] Starting file observer
I0804 11:49:32.838408       1 observer_polling.go:137] Starting file observer
I0804 11:49:34.180699       1 secure_serving.go:123] Serving securely on [::]:8443
I0804 11:49:34.185239       1 leaderelection.go:241] attempting to acquire leader lease  openshift-authentication-operator/cluster-authentication-operator-lock...
I0804 11:50:41.519473       1 leaderelection.go:251] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock
I0804 11:50:41.543085       1 event.go:255] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"b34216f4-e009-46ea-bf30-88b58963f0f5", APIVersion:"v1", ResourceVersion:"18487", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' 1a39105e-7fad-400d-8eb8-c5b3230adf15 became leader
I0804 11:50:41.649148       1 resourcesync_controller.go:218] Starting ResourceSyncController
I0804 11:50:41.649325       1 remove_stale_conditions.go:71] Starting RemoveStaleConditions
I0804 11:50:41.649379       1 status_controller.go:189] Starting StatusSyncer-authentication
I0804 11:50:41.649415       1 unsupportedconfigoverrides_controller.go:152] Starting UnsupportedConfigOverridesController
I0804 11:50:41.649462       1 logging_controller.go:83] Starting LogLevelController
I0804 11:50:41.649500       1 controller.go:205] Starting RouterCertsDomainValidationController
I0804 11:50:41.649585       1 management_state_controller.go:102] Starting management-state-controller-authentication
I0804 11:50:41.649896       1 controller.go:53] Starting AuthenticationOperator2
E0804 11:50:42.004416       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp4-1.example.internal: []
E0804 11:50:42.014917       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: failed handling the route: route is not available at canonical host oauth-openshift.apps.ocp4-1.example.internal: []

$ oc get clusterversion
NAME      VERSION                           AVAILABLE   PROGRESSING   SINCE     STATUS
version   4.0.0-0.alpha-2019-01-12-162217   False       True          12m       Unable to apply 4.0.0-0.alpha-2019-01-12-162217: a required extension is not available to update
$ oc logs -f -n openshift-core-operators pods/origin-cluster-osin-operator2-5f4666bd78-4pbgh                                                                                                                       
ERROR: logging before flag.Parse: W0112 20:07:59.848110       1 cmd.go:127] Using insecure, self-signed certificates                                                                                               
ERROR: logging before flag.Parse: I0112 20:07:59.848566       1 crypto.go:459] Generating new CA for cluster-osin-operator2-signer@1547323679 cert, and key in /tmp/serving-cert-148521676/serving-signer.crt, /tmp
/serving-cert-148521676/serving-signer.key                                                                                                                                                                         
ERROR: logging before flag.Parse: I0112 20:08:00.497211       1 crypto.go:536] Generating server certificate in /tmp/serving-cert-148521676/tls.crt, key in /tmp/serving-cert-148521676/tls.key                    
ERROR: logging before flag.Parse: I0112 20:08:00.748096       1 observer_polling.go:37] Adding reactor for file "/var/run/configmaps/config/operator-config.yaml"                                                  
ERROR: logging before flag.Parse: I0112 20:08:00.748260       1 observer_polling.go:37] Adding reactor for file "/var/run/secrets/serving-cert/tls.crt"                                                            
ERROR: logging before flag.Parse: I0112 20:08:00.748346       1 observer_polling.go:37] Adding reactor for file "/var/run/secrets/serving-cert/tls.key"                                                            
ERROR: logging before flag.Parse: I0112 20:08:00.748719       1 observer_polling.go:96] Starting file observer                                                                                                     
ERROR: logging before flag.Parse: I0112 20:08:01.574507       1 serve.go:96] Serving securely on 0.0.0.0:8443                                                                                                      
ERROR: logging before flag.Parse: I0112 20:08:01.575501       1 leaderelection.go:185] attempting to acquire leader lease  openshift-core-operators/cluster-osin-operator2-lock...                                 
ERROR: logging before flag.Parse: I0112 20:08:01.578809       1 leaderelection.go:253] lock is held by 804fd06e-16a5-11e9-8974-0a580a820003 and has not yet expired                                                
ERROR: logging before flag.Parse: I0112 20:08:01.578827       1 leaderelection.go:190] failed to acquire lease openshift-core-operators/cluster-osin-operator2-lock                                                
ERROR: logging before flag.Parse: I0112 20:08:03.753321       1 leaderelection.go:253] lock is held by 804fd06e-16a5-11e9-8974-0a580a820003 and has not yet expired                                                
ERROR: logging before flag.Parse: I0112 20:08:03.753346       1 leaderelection.go:190] failed to acquire lease openshift-core-operators/cluster-osin-operator2-lock                                                
ERROR: logging before flag.Parse: I0112 20:08:08.001561       1 leaderelection.go:253] lock is held by 804fd06e-16a5-11e9-8974-0a580a820003 and has not yet expired                                                
ERROR: logging before flag.Parse: I0112 20:08:08.001702       1 leaderelection.go:190] failed to acquire lease openshift-core-operators/cluster-osin-operator2-lock                                                
ERROR: logging before flag.Parse: I0112 20:08:11.777108       1 leaderelection.go:253] lock is held by 804fd06e-16a5-11e9-8974-0a580a820003 and has not yet expired                                               
ERROR: logging before flag.Parse: I0112 20:08:11.777731       1 leaderelection.go:190] failed to acquire lease openshift-core-operators/cluster-osin-operator2-lock                                               
ERROR: logging before flag.Parse: I0112 20:08:15.661233       1 leaderelection.go:253] lock is held by 804fd06e-16a5-11e9-8974-0a580a820003 and has not yet expired                                               
ERROR: logging before flag.Parse: I0112 20:08:15.661651       1 leaderelection.go:190] failed to acquire lease openshift-core-operators/cluster-osin-operator2-lock                                               
ERROR: logging before flag.Parse: I0112 20:08:19.283125       1 leaderelection.go:194] successfully acquired lease openshift-core-operators/cluster-osin-operator2-lock                                           
ERROR: logging before flag.Parse: I0112 20:08:19.283988       1 event.go:221] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"openshift-core-operators", Name:"cluster-osin-operator2-lock", UID:"137814e9-1$
a5-11e9-abfa-664f163f5f0f", APIVersion:"v1", ResourceVersion:"3841", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' c36ef16f-16a5-11e9-bd77-0a580a820003 became leader                                   
ERROR: logging before flag.Parse: I0112 20:08:21.301683       1 leaderelection.go:209] successfully renewed lease openshift-core-operators/cluster-osin-operator2-lock                                            
ERROR: logging before flag.Parse: I0112 20:08:23.311653       1 leaderelection.go:209] successfully renewed lease openshift-core-operators/cluster-osin-operator2-lock                                            
ERROR: logging before flag.Parse: I0112 20:08:25.335608       1 leaderelection.go:209] successfully renewed lease openshift-core-operators/cluster-osin-operator2-lock                                            
ERROR: logging before flag.Parse: I0112 20:08:27.398161       1 leaderelection.go:209] successfully renewed lease openshift-core-operators/cluster-osin-operator2-lock                                            
panic: osins.osin.openshift.io "openshift-osin" is forbidden: caches not synchronized                                                                                                                             
                                                                                                                                                                                                                  
goroutine 81 [running]:                                                                                                                                                                                           
github.com/openshift/cluster-osin-operator/vendor/github.com/openshift/library-go/pkg/operator/v1helpers.EnsureOperatorConfigExists(0x1c2bf60, 0xc4200b7378, 0xc4204cf5e0, 0x91, 0xa0, 0x1a5e164, 0x11, 0x1a529f5,
0x8, 0x1a4e7be, ...)                                                                                                                                                                                              
        /go/src/github.com/openshift/cluster-osin-operator/vendor/github.com/openshift/library-go/pkg/operator/v1helpers/helpers.go:99 +0x34e                                                                     
github.com/openshift/cluster-osin-operator/pkg/operator2.RunOperator(0xc4205b1bc0, 0x0, 0x434d48)                                                                                                                 
        /go/src/github.com/openshift/cluster-osin-operator/pkg/operator2/starter.go:83 +0x5a6                                                                                                                     
github.com/openshift/cluster-osin-operator/vendor/github.com/openshift/library-go/pkg/controller/controllercmd.(*ControllerBuilder).Run.func2(0xc420646180)                                                       
        /go/src/github.com/openshift/cluster-osin-operator/vendor/github.com/openshift/library-go/pkg/controller/controllercmd/builder.go:213 +0x4f                                                               
created by github.com/openshift/cluster-osin-operator/vendor/k8s.io/client-go/tools/leaderelection.(*LeaderElector).Run                                                                                           
        /go/src/github.com/openshift/cluster-osin-operator/vendor/k8s.io/client-go/tools/leaderelection/leaderelection.go:155 +0x92

  Conditions:
    Last Transition Time:  2019-12-05T15:21:50Z
    Reason:                AsExpected
    Status:                False
    Type:                  Degraded
    Last Transition Time:  2019-12-05T00:23:36Z
    Message:               Progressing: got '404 Not Found' status while trying to GET the OAuth well-known https://10.6.202.40:6443/.well-known/oauth-authorization-server endpoint data
    Reason:                ProgressingWellKnownNotReady
    Status:                True
    Type:                  Progressing
    Last Transition Time:  2019-12-05T00:23:36Z
    Reason:                Available
    Status:                False
    Type:                  Available
    Last Transition Time:  2019-12-05T00:23:36Z
    Reason:                AsExpected
    Status:                True
    Type:                  Upgradeabl

openshift-install wait-for install-complete
INFO Cluster operator authentication Progressing is True with ProgressingWellKnownNotReady: Progressing: got '404 Not Found' status while trying to GET the OAuth well-known https://10.6.202endpoint data
INFO Cluster operator authentication Available is False with Available:
INFO Cluster operator insights Disabled is False with :
FATAL failed to initialize the cluster: Cluster operator authentication is still updating

[root@JX2LUTL01 ~]# oc get co
NAME                                       VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE
authentication                                       False       True          False      4d23h
cloud-credential                           4.2.2     True        False         False      5d6h
cluster-autoscaler                         4.2.2     True        False         False      5d6h
console                                    4.2.2     True        False         False      3d8h
dns                                        4.2.2     True        False         False      3d8h
image-registry                             4.2.2     True        False         False      3d8h
ingress                                    4.2.2     True        False         False      3d8h
insights                                   4.2.2     True        False         False      5d6h
kube-apiserver                             4.2.2     True        False         False      5d6h
kube-controller-manager                    4.2.2     True        False         False      5d6h
kube-scheduler                             4.2.2     True        False         False      5d6h
machine-api                                4.2.2     True        False         False      5d6h
machine-config                             4.2.2     True        False         False      5d5h
marketplace                                4.2.2     True        False         False      4d8h
monitoring                                 4.2.2     True        False         False      3d8h
network                                    4.2.2     True        False         False      5d6h
node-tuning                                4.2.2     True        False         False      3d8h
openshift-apiserver                        4.2.2     True        False         False      3d8h
openshift-controller-manager               4.2.2     True        False         False      3d8h
openshift-samples                          4.2.2     True        False         False      5d6h
operator-lifecycle-manager                 4.2.2     True        False         False      5d6h
operator-lifecycle-manager-catalog         4.2.2     True        False         False      5d6h
operator-lifecycle-manager-packageserver   4.2.2     True        False         False      3d8h
service-ca                                 4.2.2     True        False         False      5d6h
service-catalog-apiserver                  4.2.2     True        False         False      5d6h
service-catalog-controller-manager         4.2.2     True        False         False      5d6h
storage                                    4.2.2     True        False         False      5d6h

[root@JX2LUTL01 ~]# oc get pods -n=openshift-authentication-operator
NAME                                       READY   STATUS    RESTARTS   AGE
authentication-operator-75ffd7fb6c-w85qx   1/1     Running   0          4h8m
[root@JX2LUTL01 ~]# oc get pods -n=openshift-authentication
NAME                               READY   STATUS    RESTARTS   AGE
oauth-openshift-56d9f65fd7-2nr4r   1/1     Running   0          4h8m
oauth-openshift-56d9f65fd7-dk2mh   1/1     Running   0          4h7m

oc describe co authentication
Name:         authentication
Namespace:
Labels:       <none>
Annotations:  <none>
API Version:  config.openshift.io/v1
Kind:         ClusterOperator
Metadata:
  Creation Timestamp:  2019-12-05T00:23:36Z
  Generation:          1
  Resource Version:    2075821
  Self Link:           /apis/config.openshift.io/v1/clusteroperators/authentication
  UID:                 7a6cb015-16f5-11ea-8114-005056a3b687
Spec:
Status:
  Conditions:
    Last Transition Time:  2019-12-09T19:36:33Z
    Reason:                AsExpected
    Status:                False
    Type:                  Degraded
    Last Transition Time:  2019-12-05T00:23:36Z
    Message:               Progressing: got '404 Not Found' status while trying to GET the OAuth well-known https://10.6.202.40:6443/.well-known/oauth-authorization-server endpoint data
    Reason:                ProgressingWellKnownNotReady
    Status:                True
    Type:                  Progressing
    Last Transition Time:  2019-12-05T00:23:36Z
    Reason:                Available
    Status:                False
    Type:                  Available
    Last Transition Time:  2019-12-05T00:23:36Z
    Reason:                AsExpected
    Status:                True
    Type:                  Upgradeable
  Extension:               <nil>
  Related Objects:
    Group:     operator.openshift.io
    Name:      cluster
    Resource:  authentications
    Group:     config.openshift.io
    Name:      cluster
    Resource:  authentications
    Group:     config.openshift.io
    Name:      cluster
    Resource:  infrastructures
    Group:     config.openshift.io
    Name:      cluster
    Resource:  oauths
    Group:
    Name:      openshift-config
    Resource:  namespaces
    Group:
    Name:      openshift-config-managed
    Resource:  namespaces
    Group:
    Name:      openshift-authentication
    Resource:  namespaces
    Group:
    Name:      openshift-authentication-operator
    Resource:  namespaces
Events:        <none>

curl https://10.6.202.40:6443/.well-known/oauth-authorization-server -k
{
  "paths": [
    "/apis",
    "/metrics",
    "/version"
  ]

[root@JX2LUTL01 ~]# oc logs oauth-openshift-56d9f65fd7-2nr4r -n=openshift-authentication
Copying system trust bundle
I1209 19:38:36.928941       1 secure_serving.go:65] Forcing use of http/1.1 only
I1209 19:38:36.929030       1 secure_serving.go:127] Serving securely on 0.0.0.0:6443

[root@JX2LUTL01 ~]# oc logs authentication-operator-75ffd7fb6c-w85qx -n=openshift-authentication-operator
Copying system trust bundle
I1209 19:37:24.376262       1 observer_polling.go:116] Starting file observer
I1209 19:37:24.376264       1 cmd.go:188] Using service-serving-cert provided certificates
I1209 19:37:24.377067       1 observer_polling.go:116] Starting file observer
I1209 19:37:24.884709       1 secure_serving.go:116] Serving securely on 0.0.0.0:8443
I1209 19:37:24.885329       1 leaderelection.go:217] attempting to acquire leader lease  openshift-authentication-operator/cluster-authentication-operator-lock...
I1209 19:38:25.477171       1 leaderelection.go:227] successfully acquired lease openshift-authentication-operator/cluster-authentication-operator-lock
I1209 19:38:25.477300       1 event.go:209] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"openshift-authentication-operator", Name:"cluster-authentication-operator-lock", UID:"faa2572c-16bb-11ea-b2f3-005056a3e087", APIVersion:"v1", ResourceVersion:"2075606", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' 53698669-1abb-11ea-968e-0a580afe0254 became leader
I1209 19:38:25.479815       1 remove_stale_conditions.go:71] Starting RemoveStaleConditions
I1209 19:38:25.479910       1 status_controller.go:188] Starting StatusSyncer-authentication
I1209 19:38:25.480105       1 unsupportedconfigoverrides_controller.go:151] Starting UnsupportedConfigOverridesController
I1209 19:38:25.480117       1 logging_controller.go:82] Starting LogLevelController
I1209 19:38:25.480124       1 controller.go:204] Starting RouterCertsDomainValidationController
I1209 19:38:25.480130       1 management_state_controller.go:101] Starting management-state-controller-authentication
I1209 19:38:25.480261       1 controller.go:53] Starting AuthenticationOperator2
I1209 19:38:25.480921       1 resourcesync_controller.go:217] Starting ResourceSyncController
I1209 19:38:28.299980       1 event.go:209] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"309b7dbf-16bb-11ea-88fe-005056a3055e", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentUpdated' Updated Deployment.apps/oauth-openshift -n openshift-authentication because it changed
E1209 19:38:54.527028       1 controller.go:129] {AuthenticationOperator2 AuthenticationOperator2} failed with: error checking current version: unable to check route health: failed to GET route: net/http: TLS handshake timeout
I1209 19:38:54.527633       1 status_controller.go:165] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-12-09T19:36:33Z","message":"RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-12-05T00:23:36Z","message":"Progressing: got '404 Not Found' status while trying to GET the OAuth well-known https://10.6.202.40:6443/.well-known/oauth-authorization-server endpoint data","reason":"ProgressingWellKnownNotReady","status":"True","type":"Progressing"},{"lastTransitionTime":"2019-12-05T00:23:36Z","reason":"Available","status":"False","type":"Available"},{"lastTransitionTime":"2019-12-05T00:23:36Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I1209 19:38:54.532774       1 event.go:209] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"309b7dbf-16bb-11ea-88fe-005056a3055e", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "" to "RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout"
I1209 19:38:55.951891       1 status_controller.go:165] clusteroperator/authentication diff {"status":{"conditions":[{"lastTransitionTime":"2019-12-09T19:36:33Z","reason":"AsExpected","status":"False","type":"Degraded"},{"lastTransitionTime":"2019-12-05T00:23:36Z","message":"Progressing: got '404 Not Found' status while trying to GET the OAuth well-known https://10.6.202.40:6443/.well-known/oauth-authorization-server endpoint data","reason":"ProgressingWellKnownNotReady","status":"True","type":"Progressing"},{"lastTransitionTime":"2019-12-05T00:23:36Z","reason":"Available","status":"False","type":"Available"},{"lastTransitionTime":"2019-12-05T00:23:36Z","reason":"AsExpected","status":"True","type":"Upgradeable"}]}}
I1209 19:38:55.956704       1 event.go:209] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"309b7dbf-16bb-11ea-88fe-005056a3055e", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded message changed from "RouteHealthDegraded: failed to GET route: net/http: TLS handshake timeout" to ""
W1209 19:44:15.503371       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2075606 (2077071)
W1209 19:46:22.589372       1 reflector.go:289] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
W1209 19:46:42.500749       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2075606 (2077744)
W1209 19:46:58.500759       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2075606 (2077814)
W1209 19:47:37.499418       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2075606 (2078011)
W1209 19:48:07.508717       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.Deployment ended with: too old resource version: 2075843 (2077090)
W1209 19:49:37.508003       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2077244 (2078512)
W1209 19:52:52.506131       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2077904 (2079390)
W1209 19:53:03.503265       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2078164 (2079439)
W1209 19:53:04.504946       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2077981 (2079441)
W1209 19:55:03.515775       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2078651 (2079949)
W1209 19:58:15.511349       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2079535 (2080770)
W1209 20:01:26.507378       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2079591 (2081614)
W1209 20:01:41.509589       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2079598 (2081689)
W1209 20:01:54.520611       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2080089 (2081752)
W1209 20:01:55.514431       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.Deployment ended with: too old resource version: 2078063 (2080300)
W1209 20:04:04.671306       1 reflector.go:289] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
W1209 20:05:22.516274       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2080936 (2082640)
W1209 20:08:14.511160       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2081774 (2083411)
W1209 20:10:30.517731       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2081836 (2083962)
W1209 20:11:46.525473       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2081901 (2084304)
W1209 20:12:28.521079       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2082779 (2084483)
W1209 20:16:13.514966       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2083551 (2085413)
W1209 20:17:04.538829       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2084099 (2085655)
W1209 20:17:16.721612       1 reflector.go:289] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.
W1209 20:17:48.525928       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2084623 (2085851)
W1209 20:19:33.519985       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.Deployment ended with: too old resource version: 2081900 (2083208)
W1209 20:20:10.530486       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2084455 (2086434)
W1209 20:24:02.530452       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2085995 (2087464)
W1209 20:24:13.518678       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2085580 (2087511)
W1209 20:25:48.544517       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2085817 (2087921)
W1209 20:26:55.535049       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2086577 (2088235)
W1209 20:27:58.523566       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.Deployment ended with: too old resource version: 2085764 (2086828)
W1209 20:30:17.536340       1 reflector.go:289] k8s.io/client-go/informers/factory.go:133: watch of *v1.ConfigMap ended with: too old resource version: 2087607 (2089082)
W1209 20:31:44.803184       1 reflector.go:289] github.com/openshift/client-go/route/informers/externalversions/factory.go:101: watch of *v1.Route ended with: The resourceVersion for the provided watch is too old.

[root@JX2LUTL01 ~]# oc describe pod authentication-operator-75ffd7fb6c-w85qx -n=openshift-authentication-operator
 State:          Running
      Started:      Mon, 09 Dec 2019 14:37:24 -0500
    Ready:          True
    Restart Count:  0
    Requests:
      cpu:     10m
      memory:  50Mi
    Environment:
      IMAGE:                   quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3e00a6a92d9443240151e5eaab44cc24a25d8fcb833c29404552494064923cb
      OPERATOR_IMAGE_VERSION:  4.2.2
      OPERAND_IMAGE_VERSION:   4.2.2_openshift
      POD_NAME:                authentication-operator-75ffd7fb6c-w85qx (v1:metadata.name)
    Mounts:
      /var/run/configmaps/config from config (rw)
      /var/run/configmaps/trusted-ca-bundle from trusted-ca-bundle (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from authentication-operator-token-7d6z8 (ro)
      /var/run/secrets/serving-cert from serving-cert (rw)
Conditions:
  Type              Status
  Initialized       True
  Ready             True
  ContainersReady   True
  PodScheduled      True
Volumes:
  config:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      authentication-operator-config
    Optional:  false
  trusted-ca-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      trusted-ca-bundle
    Optional:  true
  serving-cert:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  serving-cert
    Optional:    true
  authentication-operator-token-7d6z8:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  authentication-operator-token-7d6z8
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  node-role.kubernetes.io/master=
Tolerations:     node-role.kubernetes.io/master:NoSchedule
                 node.kubernetes.io/memory-pressure:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute for 120s
                 node.kubernetes.io/unreachable:NoExecute for 120s
Events:          <none>

[root@JX2LUTL01 ~]# oc describe pods oauth-openshift-56d9f65fd7-2nr4r -n=openshift-authentication
Name:                 oauth-openshift-56d9f65fd7-2nr4r
Namespace:            openshift-authentication
Priority:             2000000000
Priority Class Name:  system-cluster-critical
Node:                 master2.openshift.bdlab.local/10.6.202.38
Start Time:           Mon, 09 Dec 2019 14:38:28 -0500
Labels:               app=oauth-openshift
                      pod-template-hash=56d9f65fd7
Annotations:          k8s.v1.cni.cncf.io/networks-status:
                        [{
                            "name": "openshift-sdn",
                            "interface": "eth0",
                            "ips": [
                                "10.254.1.216"
                            ],
                            "default": true,
                            "dns": {}
                        }]
                      openshift.io/scc: anyuid
                      operator.openshift.io/pull-spec:
                        quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3e00a6a92d9443240151e5eaab44cc24a25d8fcb833c29404552494064923cb
                      operator.openshift.io/rvs-hash: XxhPdZ7p7TZEWwxM-1X9YUaDpKJP34ykFlYB0NaBw3yySP7D1Up7d9YE2XUk7jccIPtaiRiyd2vcq76iUyR96g
Status:               Running
IP:                   10.254.1.216
IPs:                  <none>
Controlled By:        ReplicaSet/oauth-openshift-56d9f65fd7
Containers:
  oauth-openshift:
    Container ID:  cri-o://7aee822a5e2855b017559ba74f8221556e78aa7d242adab2b573dfc3a2cb20cd
    Image:         quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3e00a6a92d9443240151e5eaab44cc24a25d8fcb833c29404552494064923cb
    Image ID:      quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3e00a6a92d9443240151e5eaab44cc24a25d8fcb833c29404552494064923cb
    Port:          6443/TCP
    Host Port:     0/TCP
    Command:
      /bin/bash
      -ec
    Args:

      if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then
          echo "Copying system trust bundle"
          cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
      fi
      exec oauth-server osinserver --config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig --v=2

    State:          Running
      Started:      Mon, 09 Dec 2019 14:38:36 -0500
    Ready:          True
    Restart Count:  0
    Requests:
      cpu:        10m
      memory:     50Mi
    Liveness:     http-get https://:6443/healthz delay=30s timeout=1s period=10s #success=1 #failure=3
    Readiness:    http-get https://:6443/healthz delay=0s timeout=1s period=10s #success=1 #failure=3
    Environment:  <none>
    Mounts:
      /var/config/system/configmaps/v4-0-config-system-cliconfig from v4-0-config-system-cliconfig (ro)
      /var/config/system/configmaps/v4-0-config-system-service-ca from v4-0-config-system-service-ca (ro)
      /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle from v4-0-config-system-trusted-ca-bundle (ro)
      /var/config/system/secrets/v4-0-config-system-ocp-branding-template from v4-0-config-system-ocp-branding-template (ro)
      /var/config/system/secrets/v4-0-config-system-router-certs from v4-0-config-system-router-certs (ro)
      /var/config/system/secrets/v4-0-config-system-serving-cert from v4-0-config-system-serving-cert (ro)
      /var/config/system/secrets/v4-0-config-system-session from v4-0-config-system-session (ro)
      /var/config/user/idp/0/secret/v4-0-config-user-idp-0-file-data from v4-0-config-user-idp-0-file-data (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from oauth-openshift-token-r7dmh (ro)
Conditions:
  Type              Status
  Initialized       True
  Ready             True
  ContainersReady   True
  PodScheduled      True
Volumes:
  v4-0-config-system-session:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  v4-0-config-system-session
    Optional:    true
  v4-0-config-system-cliconfig:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      v4-0-config-system-cliconfig
    Optional:  true
  v4-0-config-system-serving-cert:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  v4-0-config-system-serving-cert
    Optional:    true
  v4-0-config-system-service-ca:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      v4-0-config-system-service-ca
    Optional:  true
  v4-0-config-system-router-certs:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  v4-0-config-system-router-certs
    Optional:    true
  v4-0-config-system-ocp-branding-template:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  v4-0-config-system-ocp-branding-template
    Optional:    true
  v4-0-config-system-trusted-ca-bundle:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      v4-0-config-system-trusted-ca-bundle
    Optional:  true
  v4-0-config-user-idp-0-file-data:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  v4-0-config-user-idp-0-file-data
    Optional:    false
  oauth-openshift-token-r7dmh:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  oauth-openshift-token-r7dmh
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  node-role.kubernetes.io/master=
Tolerations:     node-role.kubernetes.io/master:NoSchedule
                 node.kubernetes.io/memory-pressure:NoSchedule
                 node.kubernetes.io/not-ready:NoExecute for 120s
                 node.kubernetes.io/unreachable:NoExecute for 120s
Events:          <none

time="2019-06-05T13:50:20-07:00" level=debug msg="Still waiting for the cluster to initialize: Working towards 4.0.0-0.9: 98% complete"
time="2019-06-05T13:51:54-07:00" level=debug msg="Still waiting for the cluster to initialize: Working towards 4.0.0-0.9: 99% complete"
time="2019-06-05T13:53:07-07:00" level=debug msg="Still waiting for the cluster to initialize: Working towards 4.0.0-0.9: 99% complete"
time="2019-06-05T14:01:24-07:00" level=debug msg="Still waiting for the cluster to initialize: Cluster operator authentication is still updating"
time="2019-06-05T14:18:24-07:00" level=debug msg="Still waiting for the cluster to initialize: Cluster operator console has not yet reported success"
time="2019-06-05T14:20:20-07:00" level=fatal msg="failed to initialize the cluster: Cluster operator console has not yet reported success: timed out waiting for the condition"

kubectl get clusteroperators authentication -o yaml                                                                                                                                                                                                                                                                                      

apiVersion: config.openshift.io/v1
kind: ClusterOperator
metadata:
  creationTimestamp: "2019-06-05T20:47:23Z"
  generation: 1
  name: authentication
  resourceVersion: "26265"
  selfLink: /apis/config.openshift.io/v1/clusteroperators/authentication
  uid: 1ec781df-87d3-11e9-8411-0a428212f130
spec: {}
status:
  conditions:
  - lastTransitionTime: "2019-06-05T20:49:03Z"
    message: 'Failing: error checking payload readiness: unable to check route health:
      failed to GET route: EOF'
    reason: Failing
    status: "True"
    type: Failing
  - lastTransitionTime: "2019-06-05T20:50:48Z"
    reason: AsExpected
    status: "False"
    type: Progressing
  - lastTransitionTime: "2019-06-05T20:47:29Z"
    reason: Available
    status: "False"
    type: Available
  - lastTransitionTime: "2019-06-05T20:47:23Z"
    reason: NoData
    status: Unknown
    type: Upgradeable
  extension: null
  relatedObjects:
  - group: operator.openshift.io
    name: cluster
    resource: authentications
  - group: config.openshift.io
    name: cluster
    resource: authentications
  - group: config.openshift.io
    name: cluster
    resource: infrastructures
  - group: config.openshift.io
    name: cluster
    resource: oauths
  - group: ""
    name: openshift-config
    resource: namespaces
  - group: ""
    name: openshift-config-managed
    resource: namespaces
  - group: ""
    name: openshift-authentication
    resource: namespaces
  - group: ""
    name: openshift-authentication-operator
    resource: namespaces
  versions:
  - name: integrated-oauth-server
    version: 4.0.0-0.9_openshift

curl -k https://openshift-authentication:443 
{
  "paths": [
    "/apis",
    "/healthz",
    "/healthz/log",
    "/healthz/ping",
    "/healthz/poststarthook/oauth.openshift.io-startoauthclientsbootstrapping",
    "/metrics",
    "/readyz",
    "/readyz/log",
    "/readyz/ping",
    "/readyz/poststarthook/oauth.openshift.io-startoauthclientsbootstrapping",
    "/readyz/terminating"
  ]
}

curl -k https://openshift-authentication-openshift-authentication.apps.casey-ocp.openshift.crc.aws.eng.tigera.net:443
curl: (35) Encountered end of file