This hit an issue where the kube-apiserver operator created certs over and over again in configmap cm  kube-apiserver-aggregator-client-ca in project  openshift-config-managed, which was copied to other configmaps to be loaded up by the kube-apiserver. 
 The operator should have logic to prevent too man certs being created, there should be some check to make sure that the cert file does not go over the limit of 65,535 bytes

    1.
    2.
    3.