W1006 06:54:13.372196 1 cmd.go:264] Using insecure, self-signed certificates I1006 06:54:13.372277 1 crypto.go:625] Generating new CA for cert-manager-operator-signer@1791269653 cert, and key in /tmp/serving-cert-2881518807/serving-signer.crt, /tmp/serving-cert-2881518807/serving-signer.key Validity period of the certificate for "cert-manager-operator-signer@1791269653" is unset, resetting to 43800h0m0s! I1006 06:54:13.502007 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I1006 06:54:13.502275 1 observer_polling.go:159] Starting file observer I1006 06:54:13.539604 1 builder.go:313] cert-manager-operator version - I1006 06:54:13.540147 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2881518807/tls.crt::/tmp/serving-cert-2881518807/tls.key" I1006 06:54:13.635021 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I1006 06:54:13.642298 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I1006 06:54:13.642310 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I1006 06:54:13.642323 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I1006 06:54:13.642327 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I1006 06:54:13.646075 1 secure_serving.go:57] Forcing use of http/1.1 only I1006 06:54:13.646088 1 genericapiserver.go:555] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I1006 06:54:13.652006 1 leaderelection.go:258] "Attempting to acquire leader lease..." lock="cert-manager-operator/cert-manager-operator-lock" I1006 06:54:13.652854 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I1006 06:54:13.652862 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I1006 06:54:13.652875 1 shared_informer.go:370] "Waiting for caches to sync" I1006 06:54:13.652876 1 shared_informer.go:370] "Waiting for caches to sync" I1006 06:54:13.652874 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I1006 06:54:13.652941 1 shared_informer.go:370] "Waiting for caches to sync" I1006 06:54:13.653197 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2881518807/tls.crt::/tmp/serving-cert-2881518807/tls.key" I1006 06:54:13.653287 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2881518807/tls.crt::/tmp/serving-cert-2881518807/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1791269653\" (2026-10-06 06:54:12 +0000 UTC to 2026-11-05 06:54:13 +0000 UTC (now=2026-10-06 06:54:13.653254912 +0000 UTC))" I1006 06:54:13.653511 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791269653\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791269653\" (2026-10-06 05:54:13 +0000 UTC to 2029-10-06 05:54:13 +0000 UTC (now=2026-10-06 06:54:13.653499192 +0000 UTC))" I1006 06:54:13.653527 1 secure_serving.go:211] Serving securely on [::]:8443 I1006 06:54:13.653544 1 genericapiserver.go:705] [graceful-termination] waiting for shutdown to be initiated I1006 06:54:13.653556 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I1006 06:54:13.667250 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183" I1006 06:54:13.667277 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I1006 06:54:13.667338 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I1006 06:54:13.670033 1 leaderelection.go:272] "Successfully acquired lease" lock="cert-manager-operator/cert-manager-operator-lock" I1006 06:54:13.670085 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"7c39e3c0-236d-45e0-8263-77c371147d65", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"28184", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-59b54c8f9b-jrlxx_86c5e5da-0f63-48d5-894a-0ca0512ef830 became leader I1006 06:54:13.694098 1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment I1006 06:54:13.694162 1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager I1006 06:54:13.694169 1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined I1006 06:54:13.694248 1 base_controller.go:76] Waiting for caches to sync for cert-manager-console-resources I1006 06:54:13.694271 1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment I1006 06:54:13.694729 1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment I1006 06:54:13.695354 1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources I1006 06:54:13.695372 1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources I1006 06:54:13.695442 1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources I1006 06:54:13.695468 1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources I1006 06:54:13.702707 1 reflector.go:446] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.705681 1 reflector.go:446] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.708113 1 reflector.go:446] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.710506 1 reflector.go:446] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.710595 1 reflector.go:446] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.712267 1 reflector.go:446] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.713548 1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet="" I1006 06:54:13.713561 1 features.go:147] "IstioCSR feature: enabled" logger="features" I1006 06:54:13.713568 1 features.go:159] "TrustManager feature: internal featuregate is not enabled" logger="features" I1006 06:54:13.713573 1 setup_manager.go:123] "setting up unified operator manager" logger="setup-manager" I1006 06:54:13.713578 1 setup_manager.go:124] "controller" logger="setup-manager" version="" I1006 06:54:13.713587 1 setup_manager.go:125] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false I1006 06:54:13.714142 1 reflector.go:446] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.714973 1 reflector.go:446] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:126" I1006 06:54:13.715016 1 reflector.go:446] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.716589 1 reflector.go:446] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.720705 1 reflector.go:446] "Caches populated" type="*v1.APIServer" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:126" I1006 06:54:13.728995 1 reflector.go:446] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.732789 1 reflector.go:446] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.733906 1 setup_manager.go:158] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller" I1006 06:54:13.733984 1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics" I1006 06:54:13.734086 1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false I1006 06:54:13.734262 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role" I1006 06:54:13.734277 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding" I1006 06:54:13.734279 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR" I1006 06:54:13.734327 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata" I1006 06:54:13.734333 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate" I1006 06:54:13.734403 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer" I1006 06:54:13.734436 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap" I1006 06:54:13.734452 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy" I1006 06:54:13.734494 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer" I1006 06:54:13.734585 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount" I1006 06:54:13.734592 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole" I1006 06:54:13.734596 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment" I1006 06:54:13.734754 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service" I1006 06:54:13.735386 1 controller.go:370] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding" I1006 06:54:13.743221 1 reflector.go:446] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.746859 1 reflector.go:446] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.752506 1 reflector.go:446] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.753718 1 shared_informer.go:377] "Caches are synced" I1006 06:54:13.753737 1 shared_informer.go:377] "Caches are synced" I1006 06:54:13.753799 1 shared_informer.go:377] "Caches are synced" I1006 06:54:13.753943 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-06 06:22:39 +0000 UTC to 2036-10-03 06:22:39 +0000 UTC (now=2026-10-06 06:54:13.753907086 +0000 UTC))" I1006 06:54:13.754175 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2881518807/tls.crt::/tmp/serving-cert-2881518807/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1791269653\" (2026-10-06 06:54:12 +0000 UTC to 2026-11-05 06:54:13 +0000 UTC (now=2026-10-06 06:54:13.754165428 +0000 UTC))" I1006 06:54:13.754273 1 reflector.go:446] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.754439 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791269653\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791269653\" (2026-10-06 05:54:13 +0000 UTC to 2029-10-06 05:54:13 +0000 UTC (now=2026-10-06 06:54:13.754414848 +0000 UTC))" I1006 06:54:13.754618 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-10-06 06:22:39 +0000 UTC to 2036-10-03 06:22:39 +0000 UTC (now=2026-10-06 06:54:13.75460314 +0000 UTC))" I1006 06:54:13.754640 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-10-06 06:22:40 +0000 UTC to 2036-10-03 06:22:40 +0000 UTC (now=2026-10-06 06:54:13.754628042 +0000 UTC))" I1006 06:54:13.754655 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-10-06 06:22:40 +0000 UTC to 2036-10-03 06:22:40 +0000 UTC (now=2026-10-06 06:54:13.754647139 +0000 UTC))" I1006 06:54:13.754692 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-10-06 06:22:41 +0000 UTC to 2036-10-03 06:22:41 +0000 UTC (now=2026-10-06 06:54:13.754662318 +0000 UTC))" I1006 06:54:13.754708 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-10-06 06:22:41 +0000 UTC to 2036-10-03 06:22:41 +0000 UTC (now=2026-10-06 06:54:13.754701262 +0000 UTC))" I1006 06:54:13.754729 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2t948semrr27oassugbeauksaqani2ug-kx-7df0557755_customer-system-admin-signer@1791267770\" [] issuer=\"\" (2026-10-06 06:22:49 +0000 UTC to 2026-10-13 06:22:50 +0000 UTC (now=2026-10-06 06:54:13.754713782 +0000 UTC))" I1006 06:54:13.754745 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2t948semrr27oassugbeauksaqani2ug-kx-7df0557755_sre-system-admin-signer@1791267770\" [] issuer=\"\" (2026-10-06 06:22:50 +0000 UTC to 2026-10-13 06:22:51 +0000 UTC (now=2026-10-06 06:54:13.754735282 +0000 UTC))" I1006 06:54:13.754768 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-10-06 06:22:39 +0000 UTC to 2036-10-03 06:22:39 +0000 UTC (now=2026-10-06 06:54:13.754749385 +0000 UTC))" I1006 06:54:13.755009 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2881518807/tls.crt::/tmp/serving-cert-2881518807/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1791269653\" (2026-10-06 06:54:12 +0000 UTC to 2026-11-05 06:54:13 +0000 UTC (now=2026-10-06 06:54:13.755000628 +0000 UTC))" I1006 06:54:13.755195 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1791269653\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1791269653\" (2026-10-06 05:54:13 +0000 UTC to 2029-10-06 05:54:13 +0000 UTC (now=2026-10-06 06:54:13.755186904 +0000 UTC))" I1006 06:54:13.773952 1 reflector.go:446] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.774136 1 reflector.go:446] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.774810 1 reflector.go:446] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.775409 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:161" I1006 06:54:13.775763 1 reflector.go:446] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.775790 1 reflector.go:446] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.797381 1 reflector.go:446] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:13.848598 1 reflector.go:446] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:14.786207 1 reflector.go:446] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:126" I1006 06:54:14.795106 1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment I1006 06:54:14.795117 1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment I1006 06:54:14.795125 1 base_controller.go:82] Caches are synced for cert-manager-console-resources I1006 06:54:14.795129 1 base_controller.go:119] Starting #1 worker of cert-manager-console-resources controller ... I1006 06:54:14.795128 1 base_controller.go:82] Caches are synced for DefaultCertManager I1006 06:54:14.795125 1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ... I1006 06:54:14.795136 1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ... I1006 06:54:14.795118 1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ... I1006 06:54:14.795200 1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined I1006 06:54:14.795207 1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ... I1006 06:54:14.795301 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager I1006 06:54:14.795323 1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment I1006 06:54:14.795329 1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ... I1006 06:54:14.795435 1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources I1006 06:54:14.795442 1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ... I1006 06:54:14.795447 1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources I1006 06:54:14.795453 1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ... E1006 06:54:14.795498 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1006 06:54:14.795509 1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources I1006 06:54:14.795513 1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ... E1006 06:54:14.795498 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1006 06:54:14.795520 1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources I1006 06:54:14.795528 1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ... E1006 06:54:14.795535 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1006 06:54:14.795569 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1006 06:54:14.800685 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1006 06:54:14.802756 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1006 06:54:14.802772 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E1006 06:54:14.802778 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I1006 06:54:14.811159 1 reflector.go:446] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:14.843344 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleYAMLSampleCreated' Created ConsoleYAMLSample "cert-manager-acme-issuer-sample" I1006 06:54:14.843349 1 core.go:121] Namespace "cert-manager" changes: {"metadata":{"annotations":{"openshift.io/cluster-monitoring":"true"}}} I1006 06:54:14.859581 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing I1006 06:54:14.870095 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceUpdated' Updated Namespace/cert-manager because it changed I1006 06:54:14.876368 1 reflector.go:446] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:14.887108 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleYAMLSampleCreated' Created ConsoleYAMLSample "cert-manager-certificate-sample" I1006 06:54:14.903184 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing I1006 06:54:14.920264 1 reflector.go:446] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:14.929001 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleYAMLSampleCreated' Created ConsoleYAMLSample "cert-manager-issuer-sample" I1006 06:54:14.934494 1 reflector.go:446] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:128" I1006 06:54:14.936899 1 controller.go:303] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" I1006 06:54:14.936911 1 controller.go:306] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1 I1006 06:54:14.941093 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: rolebindings.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found I1006 06:54:14.960178 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ConsoleQuickStartCreated' Created ConsoleQuickStart "cert-manager-example" I1006 06:54:15.014179 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing I1006 06:54:15.131374 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing I1006 06:54:15.141046 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing I1006 06:54:15.210067 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing I1006 06:54:15.336576 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing I1006 06:54:15.430168 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing I1006 06:54:15.568068 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing I1006 06:54:16.084119 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing I1006 06:54:16.284115 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: rolebindings.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found I1006 06:54:16.351217 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing I1006 06:54:16.544218 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing I1006 06:54:17.446787 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing I1006 06:54:17.561238 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing I1006 06:54:17.627853 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing I1006 06:54:17.648275 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing I1006 06:54:17.686141 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing I1006 06:54:17.701488 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing I1006 06:54:18.076182 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing I1006 06:54:18.491944 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing E1006 06:54:18.586532 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-deployment reconciliation failed: Operation cannot be fulfilled on certmanagers.operator.openshift.io \"cluster\": the object has been modified; please apply your changes to the latest version and try again" I1006 06:54:18.767137 1 request.go:752] "Waited before sending request" delay="1.080960157s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:54:18.873846 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing I1006 06:54:19.258207 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing E1006 06:54:19.582203 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found" I1006 06:54:19.659175 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing I1006 06:54:19.966848 1 request.go:752] "Waited before sending request" delay="1.186483669s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true" E1006 06:54:19.983255 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found" I1006 06:54:20.290160 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing I1006 06:54:20.662190 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing I1006 06:54:21.647187 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing I1006 06:54:22.295902 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing I1006 06:54:22.420079 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing I1006 06:54:22.862586 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing I1006 06:54:23.266193 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing I1006 06:54:23.729246 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing I1006 06:54:23.767099 1 request.go:752] "Waited before sending request" delay="1.13104306s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:54:23.998953 1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ4VENDQVV1Z0F3SUJBZ0lVZW5rQU9UOUR4SWo5SUhqcmNHWkFudTFWaUI0d0NnWUlLb1pJemowRUF3TXcKSWpFZ01CNEdBMVVFQXhNWFkyVnlkQzF0WVc1aFoyVnlMWGRsWW1odmIyc3RZMkV3SGhjTk1qWXhNREEyTURZMQpOREl5V2hjTk1qY3hNREEyTURZMU5ESXlXakFpTVNBd0hnWURWUVFERXhkalpYSjBMVzFoYm1GblpYSXRkMlZpCmFHOXZheTFqWVRCMk1CQUdCeXFHU000OUFnRUdCU3VCQkFBaUEySUFCRDZFWUxxTXdpelplNllxZzk1WmxQSVYKOGlYTWEvcWUrNEk3ZmxBaW1RZmhKaEUrdXhqMnoySVdvdWx3ZXdmM0NzUnRuSXZTVitoOS9jK21pcy9RR1FmZQpxbUR6SEU4M3J3Y092WHJRb0NhT0dabGZTeVl0aVlUbHdaaXBZdlArWWFOQ01FQXdEZ1lEVlIwUEFRSC9CQVFECkFnS2tNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGT01ZajcrdytYdExjSEJ6MjRzNnhZTnoKb1ltc01Bb0dDQ3FHU000OUJBTURBMmdBTUdVQ01RRFE4YkFnamJnSUlXYk1JZStjUnZpUk0vdFBqUmUrZHF2cApKeVJWRnF4YXFhMEgrb2EzWkhRMVZiODhraW9qRjQwQ01BeGdhMzgxblBmSmF5cTZSMlVEQ00rQVhyd0ZwWWdaClc5RnFnYlFSb2czOHNGdzcyTHlwN3QrS2w3M3NqVFVFUGc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]} I1006 06:54:24.012710 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed I1006 06:54:24.019423 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: rolebindings.rbac.authorization.k8s.io "cert-manager:leaderelection" not found I1006 06:54:24.023902 1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]} I1006 06:54:24.033238 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed I1006 06:54:24.660362 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing I1006 06:54:24.675283 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing I1006 06:54:24.702703 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing I1006 06:54:24.966866 1 request.go:752] "Waited before sending request" delay="1.186007704s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true" I1006 06:54:25.619408 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: rolebindings.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found I1006 06:54:26.669351 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing I1006 06:54:27.259973 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing I1006 06:54:27.661919 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing I1006 06:54:27.967111 1 request.go:752] "Waited before sending request" delay="1.12401144s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:54:28.268283 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing I1006 06:54:29.278815 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing I1006 06:54:30.120138 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing I1006 06:54:31.166402 1 request.go:752] "Waited before sending request" delay="1.046287768s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:54:32.367118 1 request.go:752] "Waited before sending request" delay="1.052300965s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" E1006 06:54:32.460569 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): rolebindings.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]" I1006 06:54:33.367235 1 request.go:752] "Waited before sending request" delay="1.100926517s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:54:34.567212 1 request.go:752] "Waited before sending request" delay="1.182326539s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true" I1006 06:54:35.567272 1 request.go:752] "Waited before sending request" delay="1.16160675s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true" I1006 06:54:36.251545 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing I1006 06:54:37.916067 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"7e9c5c1f-cefb-442d-9d54-dc41b7a7d8fe", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing I1006 06:54:41.566546 1 request.go:752] "Waited before sending request" delay="1.120201128s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:55:12.614921 1 request.go:752] "Waited before sending request" delay="1.184116788s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I1006 06:55:13.615037 1 request.go:752] "Waited before sending request" delay="1.192819035s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true" I1006 07:04:19.113720 1 request.go:752] "Waited before sending request" delay="1.178312663s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"