W0516 11:07:01.150602 1 cmd.go:257] Using insecure, self-signed certificates I0516 11:07:01.150734 1 crypto.go:600] Generating new CA for cert-manager-operator-signer@1778929621 cert, and key in /tmp/serving-cert-3685166196/serving-signer.crt, /tmp/serving-cert-3685166196/serving-signer.key Validity period of the certificate for "cert-manager-operator-signer@1778929621" is unset, resetting to 43800h0m0s! I0516 11:07:01.299352 1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}. I0516 11:07:01.299562 1 observer_polling.go:159] Starting file observer I0516 11:07:01.364209 1 builder.go:304] cert-manager-operator version - I0516 11:07:01.364689 1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-3685166196/tls.crt::/tmp/serving-cert-3685166196/tls.key" I0516 11:07:01.494998 1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController I0516 11:07:01.510491 1 maxinflight.go:139] "Initialized nonMutatingChan" len=400 I0516 11:07:01.510505 1 maxinflight.go:145] "Initialized mutatingChan" len=200 I0516 11:07:01.510518 1 maxinflight.go:116] "Set denominator for readonly requests" limit=400 I0516 11:07:01.510521 1 maxinflight.go:120] "Set denominator for mutating requests" limit=200 I0516 11:07:01.513281 1 secure_serving.go:57] Forcing use of http/1.1 only I0516 11:07:01.513293 1 genericapiserver.go:552] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete I0516 11:07:01.524991 1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController I0516 11:07:01.525015 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0516 11:07:01.525029 1 shared_informer.go:349] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController" I0516 11:07:01.525031 1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0516 11:07:01.525047 1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0516 11:07:01.525035 1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0516 11:07:01.525263 1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-3685166196/tls.crt::/tmp/serving-cert-3685166196/tls.key" I0516 11:07:01.525296 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3685166196/tls.crt::/tmp/serving-cert-3685166196/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1778929621\" (2026-05-16 11:07:00 +0000 UTC to 2026-05-16 11:07:01 +0000 UTC (now=2026-05-16 11:07:01.525276737 +0000 UTC))" I0516 11:07:01.525455 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778929621\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778929621\" (2026-05-16 10:07:01 +0000 UTC to 2029-05-16 10:07:01 +0000 UTC (now=2026-05-16 11:07:01.525423065 +0000 UTC))" I0516 11:07:01.525472 1 secure_serving.go:211] Serving securely on [::]:8443 I0516 11:07:01.525490 1 genericapiserver.go:702] [graceful-termination] waiting for shutdown to be initiated I0516 11:07:01.525503 1 tlsconfig.go:243] "Starting DynamicServingCertificateController" I0516 11:07:01.526845 1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock... I0516 11:07:01.540172 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I0516 11:07:01.540215 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183" I0516 11:07:01.540228 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I0516 11:07:01.558966 1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock I0516 11:07:01.559023 1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"c58b7a83-2e91-4a9d-97ea-5517fe8f9103", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"27598", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-665bb775dc-m594g_284ed3d9-b8d5-4d28-86a3-46004e91d9d0 became leader I0516 11:07:01.588525 1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment I0516 11:07:01.588532 1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment I0516 11:07:01.588839 1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined I0516 11:07:01.588889 1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager I0516 11:07:01.590112 1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment I0516 11:07:01.590308 1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources I0516 11:07:01.590458 1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources I0516 11:07:01.590460 1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources I0516 11:07:01.590684 1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources I0516 11:07:01.614182 1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.614192 1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.614277 1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.614365 1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.614642 1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.614641 1 reflector.go:439] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.614662 1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.618159 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.618221 1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.618321 1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.619497 1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.625279 1 shared_informer.go:356] "Caches are synced" controller="RequestHeaderAuthRequestController" I0516 11:07:01.625296 1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file" I0516 11:07:01.625307 1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" I0516 11:07:01.625450 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-16 10:34:03 +0000 UTC to 2036-05-13 10:34:03 +0000 UTC (now=2026-05-16 11:07:01.625421816 +0000 UTC))" I0516 11:07:01.625618 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3685166196/tls.crt::/tmp/serving-cert-3685166196/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1778929621\" (2026-05-16 11:07:00 +0000 UTC to 2026-05-16 11:07:01 +0000 UTC (now=2026-05-16 11:07:01.625607867 +0000 UTC))" I0516 11:07:01.625757 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778929621\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778929621\" (2026-05-16 10:07:01 +0000 UTC to 2029-05-16 10:07:01 +0000 UTC (now=2026-05-16 11:07:01.625748325 +0000 UTC))" I0516 11:07:01.625878 1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"\" (2026-05-16 10:34:04 +0000 UTC to 2036-05-13 10:34:04 +0000 UTC (now=2026-05-16 11:07:01.625867616 +0000 UTC))" I0516 11:07:01.625891 1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"\" (2026-05-16 10:34:04 +0000 UTC to 2036-05-13 10:34:04 +0000 UTC (now=2026-05-16 11:07:01.625885706 +0000 UTC))" I0516 11:07:01.625900 1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"\" (2026-05-16 10:34:05 +0000 UTC to 2036-05-13 10:34:05 +0000 UTC (now=2026-05-16 11:07:01.625894551 +0000 UTC))" I0516 11:07:01.625911 1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"\" (2026-05-16 10:34:05 +0000 UTC to 2036-05-13 10:34:05 +0000 UTC (now=2026-05-16 11:07:01.625905626 +0000 UTC))" I0516 11:07:01.625923 1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"\" (2026-05-16 10:34:05 +0000 UTC to 2036-05-13 10:34:05 +0000 UTC (now=2026-05-16 11:07:01.625917807 +0000 UTC))" I0516 11:07:01.625932 1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2qavhqplu6pab0niubmhlu4ticdsl3k0-kx-eef0f50d82_customer-system-admin-signer@1778927654\" [] issuer=\"\" (2026-05-16 10:34:13 +0000 UTC to 2026-05-23 10:34:14 +0000 UTC (now=2026-05-16 11:07:01.625926128 +0000 UTC))" I0516 11:07:01.625952 1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2qavhqplu6pab0niubmhlu4ticdsl3k0-kx-eef0f50d82_sre-system-admin-signer@1778927654\" [] issuer=\"\" (2026-05-16 10:34:14 +0000 UTC to 2026-05-23 10:34:15 +0000 UTC (now=2026-05-16 11:07:01.625941596 +0000 UTC))" I0516 11:07:01.625964 1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"\" (2026-05-16 10:34:03 +0000 UTC to 2036-05-13 10:34:03 +0000 UTC (now=2026-05-16 11:07:01.625958496 +0000 UTC))" I0516 11:07:01.626089 1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-3685166196/tls.crt::/tmp/serving-cert-3685166196/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1778929621\" (2026-05-16 11:07:00 +0000 UTC to 2026-05-16 11:07:01 +0000 UTC (now=2026-05-16 11:07:01.626080354 +0000 UTC))" I0516 11:07:01.626225 1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1778929621\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1778929621\" (2026-05-16 10:07:01 +0000 UTC to 2029-05-16 10:07:01 +0000 UTC (now=2026-05-16 11:07:01.626218309 +0000 UTC))" I0516 11:07:01.628952 1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125" I0516 11:07:01.669578 1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.679285 1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet="" I0516 11:07:01.679301 1 features.go:195] "cluster feature gate: preview featureset not enabled" logger="features" feature="TrustManager" I0516 11:07:01.679307 1 setup_manager.go:121] "setting up unified operator manager" logger="setup-manager" I0516 11:07:01.679314 1 setup_manager.go:122] "controller" logger="setup-manager" version="" I0516 11:07:01.679320 1 setup_manager.go:123] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false I0516 11:07:01.685640 1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:07:01.715153 1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125" I0516 11:07:01.723369 1 setup_manager.go:156] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller" I0516 11:07:01.723456 1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics" I0516 11:07:01.723546 1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false I0516 11:07:01.723676 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR" I0516 11:07:01.723687 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole" I0516 11:07:01.723686 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role" I0516 11:07:01.723707 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy" I0516 11:07:01.723717 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount" I0516 11:07:01.723727 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer" I0516 11:07:01.723736 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate" I0516 11:07:01.723738 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap" I0516 11:07:01.723755 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding" I0516 11:07:01.723685 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service" I0516 11:07:01.723761 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer" I0516 11:07:01.723717 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata" I0516 11:07:01.723795 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment" I0516 11:07:01.723798 1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding" I0516 11:07:01.737929 1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.737949 1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.737949 1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.737932 1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.737933 1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.747514 1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.747526 1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.747547 1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:01.788984 1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment I0516 11:07:01.788995 1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ... I0516 11:07:01.789056 1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined I0516 11:07:01.789072 1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment I0516 11:07:01.789084 1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ... I0516 11:07:01.789083 1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ... I0516 11:07:01.790177 1 base_controller.go:82] Caches are synced for DefaultCertManager I0516 11:07:01.790186 1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ... I0516 11:07:01.790192 1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment I0516 11:07:01.790198 1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ... I0516 11:07:01.790358 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager I0516 11:07:01.790529 1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources I0516 11:07:01.790538 1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ... I0516 11:07:01.790548 1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources I0516 11:07:01.790557 1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ... I0516 11:07:01.790550 1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources I0516 11:07:01.790572 1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ... E0516 11:07:01.790591 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.790624 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.790637 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I0516 11:07:01.791276 1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources I0516 11:07:01.791285 1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ... E0516 11:07:01.791316 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.796502 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.797572 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.797592 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.797595 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.807139 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.808105 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.808863 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.808870 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I0516 11:07:01.821946 1 reflector.go:439] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" E0516 11:07:01.827256 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.828409 1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.830104 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" E0516 11:07:01.831182 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found" I0516 11:07:02.018316 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing I0516 11:07:02.091101 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing I0516 11:07:02.091463 1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:02.231393 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing I0516 11:07:02.262033 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:02.299515 1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:02.377252 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found I0516 11:07:02.514418 1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:02.520043 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing I0516 11:07:02.545320 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing I0516 11:07:02.561296 1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:02.585368 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing I0516 11:07:02.591094 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing I0516 11:07:02.626615 1 controller.go:286] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" I0516 11:07:02.626632 1 controller.go:289] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1 I0516 11:07:02.640315 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing I0516 11:07:02.697100 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing I0516 11:07:03.040446 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing I0516 11:07:03.444375 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing I0516 11:07:03.797618 1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:07:03.850720 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing I0516 11:07:04.202087 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found I0516 11:07:04.717471 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing E0516 11:07:05.012316 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-deployment reconciliation failed: Operation cannot be fulfilled on certmanagers.operator.openshift.io \"cluster\": the object has been modified; please apply your changes to the latest version and try again" I0516 11:07:05.062450 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing I0516 11:07:05.086112 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing I0516 11:07:05.439884 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing I0516 11:07:05.449855 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing I0516 11:07:05.483728 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing I0516 11:07:05.633799 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing I0516 11:07:05.837132 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing I0516 11:07:06.037394 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing I0516 11:07:06.462377 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing I0516 11:07:06.589424 1 request.go:752] "Waited before sending request" delay="1.105670821s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:07:06.933047 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing E0516 11:07:07.235326 1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found" I0516 11:07:07.383156 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing I0516 11:07:07.789465 1 request.go:752] "Waited before sending request" delay="1.162537793s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true" E0516 11:07:07.804735 1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found" I0516 11:07:07.854666 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing I0516 11:07:08.029615 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing I0516 11:07:09.253446 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing I0516 11:07:10.036511 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing I0516 11:07:10.242043 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing I0516 11:07:10.832928 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing I0516 11:07:11.245785 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing I0516 11:07:11.589331 1 request.go:752] "Waited before sending request" delay="1.15805561s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:07:11.696130 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing I0516 11:07:11.842271 1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]} I0516 11:07:11.850998 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed I0516 11:07:11.863445 1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]} I0516 11:07:11.874513 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed I0516 11:07:11.998062 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found I0516 11:07:12.789799 1 request.go:752] "Waited before sending request" delay="1.185524541s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-networkpolicy-static-resources--StaticResources&force=true" I0516 11:07:12.834459 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing I0516 11:07:12.843332 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing I0516 11:07:12.861170 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing I0516 11:07:13.993380 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found I0516 11:07:14.833387 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing I0516 11:07:15.232807 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing I0516 11:07:15.636685 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing I0516 11:07:16.189107 1 request.go:752] "Waited before sending request" delay="1.154971001s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:07:16.439897 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing I0516 11:07:17.438802 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing I0516 11:07:18.261093 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing I0516 11:07:19.589977 1 request.go:752] "Waited before sending request" delay="1.179876679s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" E0516 11:07:20.404273 1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]" I0516 11:07:20.789693 1 request.go:752] "Waited before sending request" delay="1.360361512s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:07:21.989113 1 request.go:752] "Waited before sending request" delay="1.193219557s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-deployment-reportDegraded&force=true" I0516 11:07:24.036881 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing I0516 11:07:24.638289 1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"9ebd9bef-80da-4fa3-8c2b-0e05119c71e9", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing I0516 11:07:28.589146 1 request.go:752] "Waited before sending request" delay="1.191903687s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:07:30.189356 1 request.go:752] "Waited before sending request" delay="1.159767394s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:07:37.189468 1 request.go:752] "Waited before sending request" delay="1.193635932s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-deployment-Deployment&force=true" I0516 11:07:38.190052 1 request.go:752] "Waited before sending request" delay="1.193817156s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" I0516 11:17:05.020648 1 request.go:752] "Waited before sending request" delay="1.18749377s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:27:03.420673 1 request.go:752] "Waited before sending request" delay="1.176137822s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:31:03.569494 1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:31:03.622888 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183" I0516 11:31:03.636372 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I0516 11:31:03.662610 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I0516 11:31:03.666145 1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:31:03.724236 1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:03.776886 1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:31:03.785842 1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:04.182408 1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:04.191643 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:04.279071 1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:04.340870 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160" I0516 11:31:07.941043 1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125" I0516 11:31:10.516255 1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:10.767085 1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 11:31:11.146328 1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125" I0516 11:31:13.343342 1 request.go:752] "Waited before sending request" delay="1.18586745s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:31:14.344038 1 request.go:752] "Waited before sending request" delay="1.194381048s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" I0516 11:35:20.344976 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345009 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345014 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345264 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345273 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345286 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345445 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345454 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345507 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345617 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345638 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345689 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345804 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345830 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345844 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345856 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345868 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345881 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345893 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345897 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345905 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345911 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345917 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345923 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345928 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345938 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345943 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345946 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345949 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345955 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345960 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:35:20.345966 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 11:41:10.415287 1 request.go:752] "Waited before sending request" delay="1.187774586s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 11:51:10.420788 1 request.go:752] "Waited before sending request" delay="1.194216171s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" I0516 12:01:10.426147 1 request.go:752] "Waited before sending request" delay="1.194435302s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" I0516 12:21:10.439798 1 request.go:752] "Waited before sending request" delay="1.19383831s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" I0516 12:31:10.443574 1 request.go:752] "Waited before sending request" delay="1.187641596s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster" I0516 12:41:10.446497 1 request.go:752] "Waited before sending request" delay="1.194594288s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true" I0516 12:41:12.787783 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.789159 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.789245 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.789616 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.789870 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.789944 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.789980 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790181 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790207 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790330 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790397 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790421 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790593 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790688 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790724 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790760 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790952 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.790960 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.791025 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.791209 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.791314 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.791373 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.791522 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.793081 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.793345 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.793531 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.793856 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.793956 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.794074 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.794186 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.794275 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:41:12.794451 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:00.724731 1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:00.788886 1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160" I0516 12:44:00.858371 1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125" I0516 12:44:00.864061 1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:00.885256 1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160" I0516 12:44:00.899449 1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:01.043844 1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160" I0516 12:44:01.182701 1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:01.429273 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160" I0516 12:44:03.542679 1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:03.795625 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183" I0516 12:44:10.775893 1 trace.go:236] Trace[910252939]: "Reflector ListAndWatch" name:sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114 (16-May-2026 12:43:59.274) (total time: 11501ms): Trace[910252939]: ---"Objects listed" error: 11501ms (12:44:10.775) Trace[910252939]: [11.501030777s] [11.501030777s] END I0516 12:44:10.775917 1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:11.329648 1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125" I0516 12:44:11.449542 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I0516 12:44:11.618631 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209" I0516 12:44:12.851630 1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114" I0516 12:44:52.006705 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.006819 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007056 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007265 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007326 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007375 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007450 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007342 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007363 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007493 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007506 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007520 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007327 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007531 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007543 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007556 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007556 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007567 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007565 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007576 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007579 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007589 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007591 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007601 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007602 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007615 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007623 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007626 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007634 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007636 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007648 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:44:52.007679 1 streamwatcher.go:120] "Unexpected EOF during watch stream event decoding" err="unexpected EOF" I0516 12:47:03.230876 1 request.go:752] "Waited before sending request" delay="1.004294782s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"