W0501 04:03:50.466501       1 cmd.go:257] Using insecure, self-signed certificates
I0501 04:03:50.466622       1 crypto.go:600] Generating new CA for cert-manager-operator-signer@1777608230 cert, and key in /tmp/serving-cert-3748955133/serving-signer.crt, /tmp/serving-cert-3748955133/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1777608230" is unset, resetting to 43800h0m0s!
I0501 04:03:50.542719       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0501 04:03:50.542953       1 observer_polling.go:159] Starting file observer
I0501 04:03:50.574531       1 builder.go:304] cert-manager-operator version -
I0501 04:03:50.575091       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3748955133/tls.crt::/tmp/serving-cert-3748955133/tls.key"
I0501 04:03:50.700283       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0501 04:03:50.706602       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0501 04:03:50.706616       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0501 04:03:50.706635       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0501 04:03:50.706641       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0501 04:03:50.709073       1 secure_serving.go:57] Forcing use of http/1.1 only
I0501 04:03:50.709088       1 genericapiserver.go:552] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0501 04:03:50.714931       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0501 04:03:50.714937       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0501 04:03:50.714964       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0501 04:03:50.714992       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0501 04:03:50.714969       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0501 04:03:50.714970       1 shared_informer.go:349] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController"
I0501 04:03:50.715305       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3748955133/tls.crt::/tmp/serving-cert-3748955133/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777608230\" (2026-05-01 04:03:49 +0000 UTC to 2026-05-01 04:03:50 +0000 UTC (now=2026-05-01 04:03:50.715275662 +0000 UTC))"
I0501 04:03:50.716198       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3748955133/tls.crt::/tmp/serving-cert-3748955133/tls.key"
I0501 04:03:50.716224       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777608230\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777608230\" (2026-05-01 03:03:50 +0000 UTC to 2029-05-01 03:03:50 +0000 UTC (now=2026-05-01 04:03:50.716021481 +0000 UTC))"
I0501 04:03:50.716248       1 secure_serving.go:211] Serving securely on [::]:8443
I0501 04:03:50.716296       1 genericapiserver.go:702] [graceful-termination] waiting for shutdown to be initiated
I0501 04:03:50.716312       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0501 04:03:50.717187       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I0501 04:03:50.719619       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183"
I0501 04:03:50.719799       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0501 04:03:50.721415       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0501 04:03:50.732661       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I0501 04:03:50.732810       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"70384c24-310c-490a-a121-1bc5c4972be1", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"24459", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-665bb775dc-9lw5l_5cb934eb-2639-45fd-b398-15c874f9f712 became leader
I0501 04:03:50.743042       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I0501 04:03:50.743142       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I0501 04:03:50.743467       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined
I0501 04:03:50.743519       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I0501 04:03:50.743709       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I0501 04:03:50.743893       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I0501 04:03:50.744057       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources
I0501 04:03:50.744100       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I0501 04:03:50.744126       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I0501 04:03:50.752383       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.752417       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.752445       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.752417       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.752802       1 reflector.go:439] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.752833       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.752958       1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125"
I0501 04:03:50.753249       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.753285       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.753311       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.753469       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.753666       1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0501 04:03:50.764040       1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet=""
I0501 04:03:50.764060       1 features.go:195] "cluster feature gate: preview featureset not enabled" logger="features" feature="TrustManager"
I0501 04:03:50.764067       1 setup_manager.go:121] "setting up unified operator manager" logger="setup-manager"
I0501 04:03:50.764073       1 setup_manager.go:122] "controller" logger="setup-manager" version=""
I0501 04:03:50.764080       1 setup_manager.go:123] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false
I0501 04:03:50.764424       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.765324       1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.780636       1 setup_manager.go:156] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller"
I0501 04:03:50.780742       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I0501 04:03:50.780852       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I0501 04:03:50.780981       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I0501 04:03:50.781005       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I0501 04:03:50.781021       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy"
I0501 04:03:50.781023       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I0501 04:03:50.780983       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I0501 04:03:50.781077       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I0501 04:03:50.781099       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I0501 04:03:50.781111       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap"
I0501 04:03:50.781007       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I0501 04:03:50.781129       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I0501 04:03:50.781141       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I0501 04:03:50.780987       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer"
I0501 04:03:50.781053       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer"
I0501 04:03:50.781710       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I0501 04:03:50.784620       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160"
I0501 04:03:50.792226       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.792283       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.792370       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.792376       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.796372       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.796402       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.796571       1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.796829       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.797989       1 reflector.go:439] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.804970       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.805427       1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.815363       1 shared_informer.go:356] "Caches are synced" controller="RequestHeaderAuthRequestController"
I0501 04:03:50.815372       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0501 04:03:50.815383       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0501 04:03:50.815400       1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.815547       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:42 +0000 UTC to 2036-04-28 03:38:42 +0000 UTC (now=2026-05-01 04:03:50.815518788 +0000 UTC))"
I0501 04:03:50.815746       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3748955133/tls.crt::/tmp/serving-cert-3748955133/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777608230\" (2026-05-01 04:03:49 +0000 UTC to 2026-05-01 04:03:50 +0000 UTC (now=2026-05-01 04:03:50.815736865 +0000 UTC))"
I0501 04:03:50.815879       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777608230\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777608230\" (2026-05-01 03:03:50 +0000 UTC to 2029-05-01 03:03:50 +0000 UTC (now=2026-05-01 04:03:50.815870033 +0000 UTC))"
I0501 04:03:50.815979       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:43 +0000 UTC to 2036-04-28 03:38:43 +0000 UTC (now=2026-05-01 04:03:50.81596874 +0000 UTC))"
I0501 04:03:50.815991       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:44 +0000 UTC to 2036-04-28 03:38:44 +0000 UTC (now=2026-05-01 04:03:50.815986097 +0000 UTC))"
I0501 04:03:50.816000       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:44 +0000 UTC to 2036-04-28 03:38:44 +0000 UTC (now=2026-05-01 04:03:50.815994516 +0000 UTC))"
I0501 04:03:50.816008       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:45 +0000 UTC to 2036-04-28 03:38:45 +0000 UTC (now=2026-05-01 04:03:50.816003282 +0000 UTC))"
I0501 04:03:50.816016       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:45 +0000 UTC to 2036-04-28 03:38:45 +0000 UTC (now=2026-05-01 04:03:50.816011036 +0000 UTC))"
I0501 04:03:50.816025       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q0t229n7epsi76dt24b2r9569t4b9ij-kx-cdf81fc99e_customer-system-admin-signer@1777606736\" [] issuer=\"<self>\" (2026-05-01 03:38:55 +0000 UTC to 2026-05-08 03:38:56 +0000 UTC (now=2026-05-01 04:03:50.816019327 +0000 UTC))"
I0501 04:03:50.816035       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2q0t229n7epsi76dt24b2r9569t4b9ij-kx-cdf81fc99e_sre-system-admin-signer@1777606736\" [] issuer=\"<self>\" (2026-05-01 03:38:55 +0000 UTC to 2026-05-08 03:38:56 +0000 UTC (now=2026-05-01 04:03:50.816028817 +0000 UTC))"
I0501 04:03:50.816062       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-05-01 03:38:42 +0000 UTC to 2036-04-28 03:38:42 +0000 UTC (now=2026-05-01 04:03:50.816052784 +0000 UTC))"
I0501 04:03:50.816182       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3748955133/tls.crt::/tmp/serving-cert-3748955133/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777608230\" (2026-05-01 04:03:49 +0000 UTC to 2026-05-01 04:03:50 +0000 UTC (now=2026-05-01 04:03:50.816174228 +0000 UTC))"
I0501 04:03:50.816325       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777608230\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777608230\" (2026-05-01 03:03:50 +0000 UTC to 2029-05-01 03:03:50 +0000 UTC (now=2026-05-01 04:03:50.816316163 +0000 UTC))"
I0501 04:03:50.840601       1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:50.843111       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I0501 04:03:50.843125       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I0501 04:03:50.843675       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I0501 04:03:50.843686       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
I0501 04:03:50.843686       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined 
I0501 04:03:50.843694       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ...
I0501 04:03:50.843723       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I0501 04:03:50.843731       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I0501 04:03:50.843846       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I0501 04:03:50.843855       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
I0501 04:03:50.843847       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager
I0501 04:03:50.843937       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I0501 04:03:50.843953       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
E0501 04:03:50.844020       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0501 04:03:50.844177       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I0501 04:03:50.844182       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources 
I0501 04:03:50.844187       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ...
I0501 04:03:50.844187       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
E0501 04:03:50.844215       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0501 04:03:50.844224       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
E0501 04:03:50.844227       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0501 04:03:50.844229       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
E0501 04:03:50.844283       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0501 04:03:50.849089       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0501 04:03:50.851348       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0501 04:03:50.851353       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0501 04:03:50.851379       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0501 04:03:50.877412       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I0501 04:03:50.883288       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0501 04:03:50.915031       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0501 04:03:50.956755       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0501 04:03:50.988566       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0501 04:03:51.030844       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing
I0501 04:03:51.083411       1 controller.go:286] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I0501 04:03:51.083439       1 controller.go:289] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I0501 04:03:51.149155       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I0501 04:03:51.193810       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I0501 04:03:52.136720       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0501 04:03:52.267931       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I0501 04:03:52.287829       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0501 04:03:52.404015       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0501 04:03:52.421793       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I0501 04:03:53.157196       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found
I0501 04:03:53.451857       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0501 04:03:53.600116       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0501 04:03:53.643669       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I0501 04:03:54.463999       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0501 04:03:54.490209       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I0501 04:03:54.525997       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
I0501 04:03:54.641961       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0501 04:03:54.808026       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0501 04:03:54.845825       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I0501 04:03:55.234888       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0501 04:03:55.636887       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0501 04:03:55.943786       1 request.go:752] "Waited before sending request" delay="1.097878515s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:03:56.014024       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0501 04:03:56.397074       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
E0501 04:03:56.563029       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found"
I0501 04:03:56.792778       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0501 04:03:56.944047       1 request.go:752] "Waited before sending request" delay="1.110396541s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
E0501 04:03:57.180180       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I0501 04:03:57.590504       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0501 04:03:58.398130       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0501 04:03:58.607127       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0501 04:03:58.788287       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0501 04:03:59.791767       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0501 04:04:00.405959       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0501 04:04:00.787033       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing
I0501 04:04:01.143964       1 request.go:752] "Waited before sending request" delay="1.174727052s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:04:01.150222       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found
I0501 04:04:01.997854       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0501 04:04:02.027927       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I0501 04:04:02.059939       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
I0501 04:04:02.950242       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I0501 04:04:03.802631       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0501 04:04:04.396853       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing
I0501 04:04:04.785770       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0501 04:04:05.144111       1 request.go:752] "Waited before sending request" delay="1.180040732s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:04:05.611311       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0501 04:04:05.992200       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0501 04:04:06.002797       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0501 04:04:06.019969       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0501 04:04:06.030467       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0501 04:04:06.389308       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0501 04:04:07.185452       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0501 04:04:08.344059       1 request.go:752] "Waited before sending request" delay="1.158604998s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:04:09.344384       1 request.go:752] "Waited before sending request" delay="1.176130312s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
E0501 04:04:09.560129       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]"
I0501 04:04:10.544398       1 request.go:752] "Waited before sending request" delay="1.393405802s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-networkpolicy-static-resources--StaticResources&force=true"
I0501 04:04:13.192249       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0501 04:04:13.793927       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"5aff5b61-d8da-4087-8fc4-5c648c112971", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0501 04:04:18.743917       1 request.go:752] "Waited before sending request" delay="1.154593894s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:04:39.631886       1 request.go:752] "Waited before sending request" delay="1.067082102s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:13:52.959924       1 request.go:752] "Waited before sending request" delay="1.100667269s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:13:54.159197       1 request.go:752] "Waited before sending request" delay="1.190584476s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0501 04:23:52.763106       1 request.go:752] "Waited before sending request" delay="1.192161041s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true"
I0501 04:33:52.768937       1 request.go:752] "Waited before sending request" delay="1.18076356s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:34:52.286143       1 request.go:752] "Waited before sending request" delay="1.175679045s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-networkpolicy-static-resources--StaticResources&force=true"
I0501 04:39:52.240672       1 request.go:752] "Waited before sending request" delay="1.149149578s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:39:53.440169       1 request.go:752] "Waited before sending request" delay="1.191655075s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0501 04:43:52.855892       1 request.go:752] "Waited before sending request" delay="1.174926872s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true"
I0501 04:43:53.856223       1 request.go:752] "Waited before sending request" delay="1.19221225s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0501 04:53:52.764115       1 request.go:752] "Waited before sending request" delay="1.172296677s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 04:53:53.764680       1 request.go:752] "Waited before sending request" delay="1.193734192s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0501 05:03:52.763449       1 request.go:752] "Waited before sending request" delay="1.180217711s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 05:13:52.765845       1 request.go:752] "Waited before sending request" delay="1.155859757s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 05:15:52.638717       1 request.go:752] "Waited before sending request" delay="1.128892536s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 05:15:53.838118       1 request.go:752] "Waited before sending request" delay="1.19230767s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0501 05:33:52.565287       1 request.go:752] "Waited before sending request" delay="1.1811071s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0501 05:43:52.768615       1 request.go:752] "Waited before sending request" delay="1.180483751s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"