Some audit events in kube-apiserver are seen repetitive and seems to be caused by kubelet.
It is calling the configmap named "logging" which doesn't exist and return the response code to be 404.
This is seen on most of the RHOCP versions, I have validated this on 4.16-4.20.

RHOCP 4.20 (hosted on vSphere)

100%

    1. Check kube-apiserver audit logs on any master node and look for the event which is calling URI ""/api/v1/namespaces/openshift-vsphere-infra/configmaps/logging?timeout=30s""
=====
  "requestReceivedTimestamp": "2025-10-30T11:32:36.176961Z",
  "requestURI": "/api/v1/namespaces/openshift-vsphere-infra/configmaps/logging?timeout=30s",
  "responseStatus": {
    "code": 404,
    "details": {
      "kind": "configmaps",
      "name": "logging"
    },
    "message": "configmaps \"logging\" not found",
    "metadata": {},
    "reason": "NotFound",
    "status": "Failure"

repetitive audit events streaming 

If the configmap "logging" in "openshift-vsphere-infra" namespace doesn't exist and is not required, then no component in RHOCP should call for that configmap.