W0424 21:29:05.821501       1 cmd.go:257] Using insecure, self-signed certificates
I0424 21:29:05.821598       1 crypto.go:600] Generating new CA for cert-manager-operator-signer@1777066145 cert, and key in /tmp/serving-cert-16965882/serving-signer.crt, /tmp/serving-cert-16965882/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1777066145" is unset, resetting to 43800h0m0s!
I0424 21:29:05.945993       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0424 21:29:05.946178       1 observer_polling.go:159] Starting file observer
I0424 21:29:05.983846       1 builder.go:304] cert-manager-operator version -
I0424 21:29:05.984555       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-16965882/tls.crt::/tmp/serving-cert-16965882/tls.key"
I0424 21:29:06.210727       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0424 21:29:06.221575       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0424 21:29:06.221589       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0424 21:29:06.221601       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0424 21:29:06.221605       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0424 21:29:06.224210       1 secure_serving.go:57] Forcing use of http/1.1 only
I0424 21:29:06.224223       1 genericapiserver.go:552] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0424 21:29:06.230280       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0424 21:29:06.230283       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 21:29:06.230309       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 21:29:06.230331       1 shared_informer.go:349] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController"
I0424 21:29:06.230332       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 21:29:06.230332       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 21:29:06.230454       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-16965882/tls.crt::/tmp/serving-cert-16965882/tls.key"
I0424 21:29:06.230514       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-16965882/tls.crt::/tmp/serving-cert-16965882/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777066145\" (2026-04-24 21:29:04 +0000 UTC to 2026-04-24 21:29:05 +0000 UTC (now=2026-04-24 21:29:06.230483251 +0000 UTC))"
I0424 21:29:06.230665       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777066146\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777066146\" (2026-04-24 20:29:05 +0000 UTC to 2029-04-24 20:29:05 +0000 UTC (now=2026-04-24 21:29:06.230653948 +0000 UTC))"
I0424 21:29:06.230689       1 secure_serving.go:211] Serving securely on [::]:8443
I0424 21:29:06.230704       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0424 21:29:06.230706       1 genericapiserver.go:702] [graceful-termination] waiting for shutdown to be initiated
I0424 21:29:06.230801       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I0424 21:29:06.234743       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183"
I0424 21:29:06.234774       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0424 21:29:06.234830       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0424 21:29:06.243518       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I0424 21:29:06.243568       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"6e7d4c43-d7a6-45a9-9471-63d046526bcf", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"24164", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-665bb775dc-mjt7z_95482f41-70a7-48d3-b152-0b08845d122f became leader
I0424 21:29:06.254645       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I0424 21:29:06.254680       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined
I0424 21:29:06.254696       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I0424 21:29:06.254731       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I0424 21:29:06.254795       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I0424 21:29:06.255953       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources
I0424 21:29:06.256175       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I0424 21:29:06.256740       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I0424 21:29:06.256891       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I0424 21:29:06.273772       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.273815       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.274354       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.275543       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.277762       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.278992       1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.279736       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.281802       1 reflector.go:439] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.281901       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.282165       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.282206       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.289717       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.301776       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 21:29:06.302068       1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0424 21:29:06.309862       1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet=""
I0424 21:29:06.309881       1 features.go:195] "cluster feature gate: preview featureset not enabled" logger="features" feature="TrustManager"
I0424 21:29:06.309888       1 setup_manager.go:121] "setting up unified operator manager" logger="setup-manager"
I0424 21:29:06.309897       1 setup_manager.go:122] "controller" logger="setup-manager" version=""
I0424 21:29:06.309906       1 setup_manager.go:123] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false
I0424 21:29:06.326986       1 setup_manager.go:156] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller"
I0424 21:29:06.327086       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I0424 21:29:06.327188       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I0424 21:29:06.327336       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer"
I0424 21:29:06.327356       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I0424 21:29:06.327363       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy"
I0424 21:29:06.327374       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I0424 21:29:06.327370       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I0424 21:29:06.327397       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer"
I0424 21:29:06.327413       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap"
I0424 21:29:06.327423       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I0424 21:29:06.327445       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I0424 21:29:06.327450       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I0424 21:29:06.327459       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I0424 21:29:06.327466       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I0424 21:29:06.327498       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I0424 21:29:06.328674       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I0424 21:29:06.330505       1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125"
I0424 21:29:06.330515       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 21:29:06.330599       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 21:29:06.330675       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:24 +0000 UTC to 2036-04-21 21:03:24 +0000 UTC (now=2026-04-24 21:29:06.330656126 +0000 UTC))"
I0424 21:29:06.330695       1 shared_informer.go:356] "Caches are synced" controller="RequestHeaderAuthRequestController"
I0424 21:29:06.330874       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-16965882/tls.crt::/tmp/serving-cert-16965882/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777066145\" (2026-04-24 21:29:04 +0000 UTC to 2026-04-24 21:29:05 +0000 UTC (now=2026-04-24 21:29:06.330865626 +0000 UTC))"
I0424 21:29:06.331017       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777066146\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777066146\" (2026-04-24 20:29:05 +0000 UTC to 2029-04-24 20:29:05 +0000 UTC (now=2026-04-24 21:29:06.331007759 +0000 UTC))"
I0424 21:29:06.331122       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:24 +0000 UTC to 2036-04-21 21:03:24 +0000 UTC (now=2026-04-24 21:29:06.33111037 +0000 UTC))"
I0424 21:29:06.331137       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:25 +0000 UTC to 2036-04-21 21:03:25 +0000 UTC (now=2026-04-24 21:29:06.331130114 +0000 UTC))"
I0424 21:29:06.331146       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:26 +0000 UTC to 2036-04-21 21:03:26 +0000 UTC (now=2026-04-24 21:29:06.33114026 +0000 UTC))"
I0424 21:29:06.331157       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:26 +0000 UTC to 2036-04-21 21:03:26 +0000 UTC (now=2026-04-24 21:29:06.331151457 +0000 UTC))"
I0424 21:29:06.331166       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:27 +0000 UTC to 2036-04-21 21:03:27 +0000 UTC (now=2026-04-24 21:29:06.331160518 +0000 UTC))"
I0424 21:29:06.331179       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2psomt13itcoqvhn53h408vdr189m59v-kx-c9cd49ffd2_customer-system-admin-signer@1777064618\" [] issuer=\"<self>\" (2026-04-24 21:03:37 +0000 UTC to 2026-05-01 21:03:38 +0000 UTC (now=2026-04-24 21:29:06.331171723 +0000 UTC))"
I0424 21:29:06.331189       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2psomt13itcoqvhn53h408vdr189m59v-kx-c9cd49ffd2_sre-system-admin-signer@1777064618\" [] issuer=\"<self>\" (2026-04-24 21:03:38 +0000 UTC to 2026-05-01 21:03:39 +0000 UTC (now=2026-04-24 21:29:06.331182899 +0000 UTC))"
I0424 21:29:06.331200       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 21:03:24 +0000 UTC to 2036-04-21 21:03:24 +0000 UTC (now=2026-04-24 21:29:06.331194826 +0000 UTC))"
I0424 21:29:06.331327       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-16965882/tls.crt::/tmp/serving-cert-16965882/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777066145\" (2026-04-24 21:29:04 +0000 UTC to 2026-04-24 21:29:05 +0000 UTC (now=2026-04-24 21:29:06.331320282 +0000 UTC))"
I0424 21:29:06.331450       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777066146\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777066146\" (2026-04-24 20:29:05 +0000 UTC to 2029-04-24 20:29:05 +0000 UTC (now=2026-04-24 21:29:06.331442155 +0000 UTC))"
I0424 21:29:06.337546       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.337570       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.337536       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.337581       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.337864       1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.346980       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.347095       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.347178       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.347268       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.347326       1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.348168       1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.348699       1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.354682       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I0424 21:29:06.354696       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
I0424 21:29:06.354814       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I0424 21:29:06.354824       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
I0424 21:29:06.354827       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I0424 21:29:06.354832       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I0424 21:29:06.354835       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I0424 21:29:06.354836       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I0424 21:29:06.354959       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager
I0424 21:29:06.355255       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined 
I0424 21:29:06.355266       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ...
I0424 21:29:06.356871       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources 
I0424 21:29:06.356882       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ...
I0424 21:29:06.356882       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I0424 21:29:06.356890       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
I0424 21:29:06.356915       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I0424 21:29:06.356937       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
I0424 21:29:06.356948       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
I0424 21:29:06.356954       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
E0424 21:29:06.356962       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.356971       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.356985       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.357002       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.362667       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.364800       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.364804       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 21:29:06.364810       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0424 21:29:06.370806       1 reflector.go:439] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.410808       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I0424 21:29:06.410911       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0424 21:29:06.447103       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0424 21:29:06.549495       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0424 21:29:06.558199       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 21:29:06.599085       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing
I0424 21:29:06.629841       1 controller.go:286] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I0424 21:29:06.629865       1 controller.go:289] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I0424 21:29:06.661357       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I0424 21:29:06.695487       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I0424 21:29:07.527850       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0424 21:29:07.700846       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I0424 21:29:07.777808       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0424 21:29:07.945697       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0424 21:29:07.962533       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I0424 21:29:08.668968       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found
I0424 21:29:08.972961       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0424 21:29:09.165946       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I0424 21:29:09.275781       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0424 21:29:10.203785       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0424 21:29:10.240837       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I0424 21:29:10.337529       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
I0424 21:29:10.347025       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0424 21:29:10.542613       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0424 21:29:10.597838       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I0424 21:29:10.846969       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0424 21:29:11.178946       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0424 21:29:11.656978       1 request.go:752] "Waited before sending request" delay="1.059092349s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:11.813846       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0424 21:29:12.217129       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
E0424 21:29:12.480102       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found"
I0424 21:29:12.517786       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0424 21:29:12.856686       1 request.go:752] "Waited before sending request" delay="1.165843061s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
E0424 21:29:12.920915       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I0424 21:29:13.780896       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0424 21:29:14.006458       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0424 21:29:14.100025       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0424 21:29:14.569547       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0424 21:29:15.351778       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0424 21:29:15.938575       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0424 21:29:16.356968       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing
I0424 21:29:16.656059       1 request.go:752] "Waited before sending request" delay="1.163114622s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:17.061663       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found
I0424 21:29:17.927595       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0424 21:29:17.939475       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I0424 21:29:17.974414       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
I0424 21:29:18.662375       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I0424 21:29:19.674087       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0424 21:29:20.456674       1 request.go:752] "Waited before sending request" delay="1.087022926s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:20.475916       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing
I0424 21:29:21.155970       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0424 21:29:21.621559       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0424 21:29:22.056976       1 request.go:752] "Waited before sending request" delay="1.144899199s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:22.885765       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0424 21:29:23.406654       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0424 21:29:24.457120       1 request.go:752] "Waited before sending request" delay="1.050455503s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:25.656887       1 request.go:752] "Waited before sending request" delay="1.380739461s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-deployment-reportDegraded&force=true"
E0424 21:29:25.920916       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]"
I0424 21:29:26.856955       1 request.go:752] "Waited before sending request" delay="1.291458836s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:29.341955       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0424 21:29:30.213149       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0424 21:29:30.657035       1 request.go:752] "Waited before sending request" delay="1.184834691s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:34.056332       1 request.go:752] "Waited before sending request" delay="1.189223196s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:29:35.256748       1 request.go:752] "Waited before sending request" delay="1.189279974s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0424 21:29:36.256953       1 request.go:752] "Waited before sending request" delay="1.189579977s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true"
I0424 21:29:38.476394       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0424 21:29:38.483083       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0424 21:29:38.487911       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0424 21:29:38.493507       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"8a5c790f-2f99-4d21-ba54-638810a9c383", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0424 21:30:54.991042       1 request.go:752] "Waited before sending request" delay="1.050283472s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:30:56.191522       1 request.go:752] "Waited before sending request" delay="1.192730845s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0424 21:39:09.880244       1 request.go:752] "Waited before sending request" delay="1.184749595s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:49:07.906809       1 request.go:752] "Waited before sending request" delay="1.017552318s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 21:49:09.106386       1 request.go:752] "Waited before sending request" delay="1.187801593s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0424 21:59:09.681447       1 request.go:752] "Waited before sending request" delay="1.147370423s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:05:08.255315       1 request.go:752] "Waited before sending request" delay="1.070156795s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:09:09.684952       1 request.go:752] "Waited before sending request" delay="1.185475374s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:19:09.883952       1 request.go:752] "Waited before sending request" delay="1.187166971s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:29:09.684286       1 request.go:752] "Waited before sending request" delay="1.185073247s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:39:09.884067       1 request.go:752] "Waited before sending request" delay="1.184318804s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:41:08.240550       1 request.go:752] "Waited before sending request" delay="1.039136474s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:49:08.086238       1 request.go:752] "Waited before sending request" delay="1.181966037s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:49:09.886342       1 request.go:752] "Waited before sending request" delay="1.186785046s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 22:59:09.885887       1 request.go:752] "Waited before sending request" delay="1.184322314s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 23:09:09.887298       1 request.go:752] "Waited before sending request" delay="1.182515111s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"