W0427 22:48:34.504890       1 cmd.go:257] Using insecure, self-signed certificates
I0427 22:48:34.505001       1 crypto.go:600] Generating new CA for cert-manager-operator-signer@1777330114 cert, and key in /tmp/serving-cert-333880175/serving-signer.crt, /tmp/serving-cert-333880175/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1777330114" is unset, resetting to 43800h0m0s!
I0427 22:48:34.629866       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0427 22:48:34.630126       1 observer_polling.go:159] Starting file observer
I0427 22:48:34.654927       1 builder.go:304] cert-manager-operator version -
I0427 22:48:34.655452       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-333880175/tls.crt::/tmp/serving-cert-333880175/tls.key"
I0427 22:48:34.736759       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0427 22:48:34.741824       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0427 22:48:34.741839       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0427 22:48:34.741856       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0427 22:48:34.741861       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0427 22:48:34.744492       1 secure_serving.go:57] Forcing use of http/1.1 only
I0427 22:48:34.744501       1 genericapiserver.go:552] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0427 22:48:34.748984       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0427 22:48:34.749009       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0427 22:48:34.749042       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0427 22:48:34.749042       1 shared_informer.go:349] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController"
I0427 22:48:34.749712       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-333880175/tls.crt::/tmp/serving-cert-333880175/tls.key"
I0427 22:48:34.749926       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0427 22:48:34.749967       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0427 22:48:34.749969       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-333880175/tls.crt::/tmp/serving-cert-333880175/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777330114\" (2026-04-27 22:48:33 +0000 UTC to 2026-04-27 22:48:34 +0000 UTC (now=2026-04-27 22:48:34.749928354 +0000 UTC))"
I0427 22:48:34.750546       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777330114\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777330114\" (2026-04-27 21:48:34 +0000 UTC to 2029-04-27 21:48:34 +0000 UTC (now=2026-04-27 22:48:34.75022598 +0000 UTC))"
I0427 22:48:34.750572       1 secure_serving.go:211] Serving securely on [::]:8443
I0427 22:48:34.750596       1 genericapiserver.go:702] [graceful-termination] waiting for shutdown to be initiated
I0427 22:48:34.750614       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0427 22:48:34.751010       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I0427 22:48:34.753401       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0427 22:48:34.753721       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183"
I0427 22:48:34.753867       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0427 22:48:34.761448       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I0427 22:48:34.761475       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"a1037d80-2732-45a1-bd66-b54e4f615abd", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"30469", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-665bb775dc-tdsh8_7482ccc3-8c68-4180-ac6c-b88b6a1fe195 became leader
I0427 22:48:34.771450       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I0427 22:48:34.771462       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I0427 22:48:34.771520       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I0427 22:48:34.771782       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I0427 22:48:34.771801       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined
I0427 22:48:34.772182       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources
I0427 22:48:34.773970       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I0427 22:48:34.774099       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I0427 22:48:34.774108       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I0427 22:48:34.774251       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.775187       1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0427 22:48:34.775352       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.775441       1 reflector.go:439] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.776074       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.783518       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.787046       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.789120       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.789135       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.789388       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.790827       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.791737       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.792670       1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.796791       1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet=""
I0427 22:48:34.796813       1 features.go:195] "cluster feature gate: preview featureset not enabled" logger="features" feature="TrustManager"
I0427 22:48:34.796821       1 setup_manager.go:121] "setting up unified operator manager" logger="setup-manager"
I0427 22:48:34.796830       1 setup_manager.go:122] "controller" logger="setup-manager" version=""
I0427 22:48:34.796840       1 setup_manager.go:123] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false
I0427 22:48:34.804081       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160"
I0427 22:48:34.812123       1 setup_manager.go:156] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller"
I0427 22:48:34.812208       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I0427 22:48:34.812303       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I0427 22:48:34.812423       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer"
I0427 22:48:34.812437       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap"
I0427 22:48:34.812439       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I0427 22:48:34.812456       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I0427 22:48:34.812472       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer"
I0427 22:48:34.812537       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I0427 22:48:34.812584       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy"
I0427 22:48:34.812536       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I0427 22:48:34.812627       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I0427 22:48:34.812674       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I0427 22:48:34.812702       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I0427 22:48:34.812709       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I0427 22:48:34.812787       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I0427 22:48:34.812830       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I0427 22:48:34.813406       1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125"
I0427 22:48:34.818743       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.818760       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.831429       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.831512       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.831644       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.831723       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.831823       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.831894       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.849154       1 shared_informer.go:356] "Caches are synced" controller="RequestHeaderAuthRequestController"
I0427 22:48:34.849246       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0427 22:48:34.849549       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:57 +0000 UTC to 2036-04-24 22:14:57 +0000 UTC (now=2026-04-27 22:48:34.849531841 +0000 UTC))"
I0427 22:48:34.849569       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:57 +0000 UTC to 2036-04-24 22:14:57 +0000 UTC (now=2026-04-27 22:48:34.849557486 +0000 UTC))"
I0427 22:48:34.849596       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:58 +0000 UTC to 2036-04-24 22:14:58 +0000 UTC (now=2026-04-27 22:48:34.849576297 +0000 UTC))"
I0427 22:48:34.849616       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:59 +0000 UTC to 2036-04-24 22:14:59 +0000 UTC (now=2026-04-27 22:48:34.849604552 +0000 UTC))"
I0427 22:48:34.849631       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:59 +0000 UTC to 2036-04-24 22:14:59 +0000 UTC (now=2026-04-27 22:48:34.849621018 +0000 UTC))"
I0427 22:48:34.849652       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pup18oubfj3m5ert4qr29ksv675o9u0-kx-1072d21743_customer-system-admin-signer@1777328111\" [] issuer=\"<self>\" (2026-04-27 22:15:10 +0000 UTC to 2026-05-04 22:15:11 +0000 UTC (now=2026-04-27 22:48:34.849636388 +0000 UTC))"
I0427 22:48:34.849672       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pup18oubfj3m5ert4qr29ksv675o9u0-kx-1072d21743_sre-system-admin-signer@1777328111\" [] issuer=\"<self>\" (2026-04-27 22:15:10 +0000 UTC to 2026-05-04 22:15:11 +0000 UTC (now=2026-04-27 22:48:34.849660685 +0000 UTC))"
I0427 22:48:34.849919       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-333880175/tls.crt::/tmp/serving-cert-333880175/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777330114\" (2026-04-27 22:48:33 +0000 UTC to 2026-04-27 22:48:34 +0000 UTC (now=2026-04-27 22:48:34.849903252 +0000 UTC))"
I0427 22:48:34.850032       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0427 22:48:34.850127       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777330114\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777330114\" (2026-04-27 21:48:34 +0000 UTC to 2029-04-27 21:48:34 +0000 UTC (now=2026-04-27 22:48:34.850114689 +0000 UTC))"
I0427 22:48:34.850368       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:57 +0000 UTC to 2036-04-24 22:14:57 +0000 UTC (now=2026-04-27 22:48:34.850342872 +0000 UTC))"
I0427 22:48:34.850398       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:57 +0000 UTC to 2036-04-24 22:14:57 +0000 UTC (now=2026-04-27 22:48:34.850382138 +0000 UTC))"
I0427 22:48:34.850417       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:58 +0000 UTC to 2036-04-24 22:14:58 +0000 UTC (now=2026-04-27 22:48:34.850404054 +0000 UTC))"
I0427 22:48:34.850440       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:59 +0000 UTC to 2036-04-24 22:14:59 +0000 UTC (now=2026-04-27 22:48:34.850427096 +0000 UTC))"
I0427 22:48:34.850460       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:59 +0000 UTC to 2036-04-24 22:14:59 +0000 UTC (now=2026-04-27 22:48:34.85044792 +0000 UTC))"
I0427 22:48:34.850476       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pup18oubfj3m5ert4qr29ksv675o9u0-kx-1072d21743_customer-system-admin-signer@1777328111\" [] issuer=\"<self>\" (2026-04-27 22:15:10 +0000 UTC to 2026-05-04 22:15:11 +0000 UTC (now=2026-04-27 22:48:34.850466498 +0000 UTC))"
I0427 22:48:34.850497       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pup18oubfj3m5ert4qr29ksv675o9u0-kx-1072d21743_sre-system-admin-signer@1777328111\" [] issuer=\"<self>\" (2026-04-27 22:15:10 +0000 UTC to 2026-05-04 22:15:11 +0000 UTC (now=2026-04-27 22:48:34.850488332 +0000 UTC))"
I0427 22:48:34.850509       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-27 22:14:56 +0000 UTC to 2036-04-24 22:14:56 +0000 UTC (now=2026-04-27 22:48:34.850503071 +0000 UTC))"
I0427 22:48:34.850653       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-333880175/tls.crt::/tmp/serving-cert-333880175/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777330114\" (2026-04-27 22:48:33 +0000 UTC to 2026-04-27 22:48:34 +0000 UTC (now=2026-04-27 22:48:34.850641755 +0000 UTC))"
I0427 22:48:34.850800       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777330114\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777330114\" (2026-04-27 21:48:34 +0000 UTC to 2029-04-27 21:48:34 +0000 UTC (now=2026-04-27 22:48:34.850785712 +0000 UTC))"
I0427 22:48:34.857511       1 reflector.go:439] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.870360       1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.872054       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I0427 22:48:34.872068       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I0427 22:48:34.872061       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I0427 22:48:34.872099       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
I0427 22:48:34.872138       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined 
I0427 22:48:34.872147       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ...
I0427 22:48:34.872153       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I0427 22:48:34.872160       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I0427 22:48:34.872186       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I0427 22:48:34.872215       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
I0427 22:48:34.872425       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager
I0427 22:48:34.872435       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources 
I0427 22:48:34.872451       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ...
E0427 22:48:34.872522       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0427 22:48:34.874059       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
I0427 22:48:34.874071       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
E0427 22:48:34.874134       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0427 22:48:34.874161       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I0427 22:48:34.874170       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
I0427 22:48:34.874162       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I0427 22:48:34.874186       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
E0427 22:48:34.874231       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.874251       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.878321       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.879484       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.881605       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.881624       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.889397       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.889694       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.891684       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0427 22:48:34.892785       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0427 22:48:34.931284       1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.961212       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0427 22:48:34.965465       1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.973817       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I0427 22:48:34.984404       1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:34.998419       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0427 22:48:35.046484       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I0427 22:48:35.091553       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0427 22:48:35.149197       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:35.175043       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing
I0427 22:48:35.182521       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I0427 22:48:35.215506       1 controller.go:286] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I0427 22:48:35.215525       1 controller.go:289] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I0427 22:48:35.264389       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I0427 22:48:36.024925       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0427 22:48:36.235047       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0427 22:48:36.364009       1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0427 22:48:36.435170       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0427 22:48:36.455134       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I0427 22:48:37.177760       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found
I0427 22:48:37.425709       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0427 22:48:37.613274       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
E0427 22:48:38.406042       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-deployment reconciliation failed: Operation cannot be fulfilled on certmanagers.operator.openshift.io \"cluster\": the object has been modified; please apply your changes to the latest version and try again"
I0427 22:48:38.685458       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0427 22:48:38.740569       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I0427 22:48:38.829475       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
I0427 22:48:38.849607       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0427 22:48:38.988328       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0427 22:48:39.019736       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I0427 22:48:39.233111       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I0427 22:48:39.281682       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0427 22:48:39.701467       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0427 22:48:40.070634       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0427 22:48:40.173081       1 request.go:752] "Waited before sending request" delay="1.153303891s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
E0427 22:48:40.999384       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found"
I0427 22:48:41.083405       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0427 22:48:41.372974       1 request.go:752] "Waited before sending request" delay="1.082395492s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
E0427 22:48:41.409550       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I0427 22:48:41.780747       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0427 22:48:41.874655       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0427 22:48:42.255796       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0427 22:48:42.686640       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0427 22:48:43.462111       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0427 22:48:44.057374       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0427 22:48:44.410457       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0427 22:48:44.773150       1 request.go:752] "Waited before sending request" delay="1.087757346s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 22:48:45.222560       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing
I0427 22:48:45.596024       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0427 22:48:45.601866       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0427 22:48:45.605973       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ4RENDQVV1Z0F3SUJBZ0lVVWhHQkFJQUhRNDVGRkVwOUwwUDBvTkdpMjZJd0NnWUlLb1pJemowRUF3TXcKSWpFZ01CNEdBMVVFQXhNWFkyVnlkQzF0WVc1aFoyVnlMWGRsWW1odmIyc3RZMkV3SGhjTk1qWXdOREkzTWpJMApPRFF6V2hjTk1qY3dOREkzTWpJME9EUXpXakFpTVNBd0hnWURWUVFERXhkalpYSjBMVzFoYm1GblpYSXRkMlZpCmFHOXZheTFqWVRCMk1CQUdCeXFHU000OUFnRUdCU3VCQkFBaUEySUFCTVBtQ080Y2Z0bDdIa0hNaittclp5WXQKRzR4U2xMb3BjOHQ4eXl3Ym44dlBqdlFWdUNFQmNGWTZSaWw2QXFTbWNXK0M4NFhEYkdXcGVuWjZFd3pzK3dCRQpqM2FnZzBSU1RMTGhkbmE4a1c1cjcrTVZBalVjRmp4MWdWazdBWVlLQ0tOQ01FQXdEZ1lEVlIwUEFRSC9CQVFECkFnS2tNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGRFJSOUR1LzdSSHVId3Mwc2NTdEdhZmEKMWxNTE1Bb0dDQ3FHU000OUJBTURBMmNBTUdRQ01EeVBMWURkRGdqVStpT0E3dVpYbTVwME51ZXZwWWFPeERUbQp4TTZ6RWpjNlJ4QW5rSFVybHlHWFhYdVkzRmpuamdJd1BFY3ZON1pwYks5clJXTWJVOU5mQ3BVdDdIb1NWWklRCmk3MWJ4d1BZOVpqR2lvbGtoU2JWVUJIaS9NdEppMlFFCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0427 22:48:45.612839       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0427 22:48:45.978096       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found
I0427 22:48:46.818147       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0427 22:48:46.832985       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I0427 22:48:46.857204       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
I0427 22:48:47.578604       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I0427 22:48:48.233360       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0427 22:48:48.572527       1 request.go:752] "Waited before sending request" delay="1.17346632s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 22:48:49.021511       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing
I0427 22:48:49.629762       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0427 22:48:50.373008       1 request.go:752] "Waited before sending request" delay="1.188317671s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 22:48:50.440157       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0427 22:48:51.220204       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0427 22:48:52.021762       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0427 22:48:53.572349       1 request.go:752] "Waited before sending request" delay="1.18585695s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
E0427 22:48:53.988194       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]"
I0427 22:48:54.572944       1 request.go:752] "Waited before sending request" delay="1.361617744s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 22:48:55.573004       1 request.go:752] "Waited before sending request" delay="1.193834667s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-deployment-reportDegraded&force=true"
I0427 22:48:58.192131       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0427 22:49:00.532580       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"78121761-32ee-4b06-91d4-112682dc70d9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0427 22:49:03.372314       1 request.go:752] "Waited before sending request" delay="1.111140471s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 22:49:04.372731       1 request.go:752] "Waited before sending request" delay="1.14029254s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 22:49:05.373197       1 request.go:752] "Waited before sending request" delay="1.19198677s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0427 23:08:36.382169       1 request.go:752] "Waited before sending request" delay="1.181678509s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:18:37.185822       1 request.go:752] "Waited before sending request" delay="1.042564374s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:18:38.386033       1 request.go:752] "Waited before sending request" delay="1.161858089s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0427 23:24:36.701175       1 request.go:752] "Waited before sending request" delay="1.151206255s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:28:38.187277       1 request.go:752] "Waited before sending request" delay="1.182059468s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:38:36.588626       1 request.go:752] "Waited before sending request" delay="1.184831294s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:38:38.388052       1 request.go:752] "Waited before sending request" delay="1.183953475s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:48:38.188299       1 request.go:752] "Waited before sending request" delay="1.18573908s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0427 23:58:38.189226       1 request.go:752] "Waited before sending request" delay="1.185806322s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 00:08:38.189207       1 request.go:752] "Waited before sending request" delay="1.184137051s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 00:18:38.189994       1 request.go:752] "Waited before sending request" delay="1.186204791s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"