W0428 14:46:51.518328       1 cmd.go:257] Using insecure, self-signed certificates
I0428 14:46:51.518648       1 crypto.go:600] Generating new CA for cert-manager-operator-signer@1777387611 cert, and key in /tmp/serving-cert-1227040942/serving-signer.crt, /tmp/serving-cert-1227040942/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1777387611" is unset, resetting to 43800h0m0s!
I0428 14:46:51.619672       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0428 14:46:51.619865       1 observer_polling.go:159] Starting file observer
I0428 14:46:51.652119       1 builder.go:304] cert-manager-operator version -
I0428 14:46:51.652683       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-1227040942/tls.crt::/tmp/serving-cert-1227040942/tls.key"
I0428 14:46:51.740751       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0428 14:46:51.751860       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0428 14:46:51.751876       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0428 14:46:51.751889       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0428 14:46:51.751894       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0428 14:46:51.754505       1 secure_serving.go:57] Forcing use of http/1.1 only
I0428 14:46:51.754517       1 genericapiserver.go:552] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0428 14:46:51.760102       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0428 14:46:51.760115       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0428 14:46:51.760146       1 shared_informer.go:349] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController"
I0428 14:46:51.760152       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0428 14:46:51.760148       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0428 14:46:51.760173       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0428 14:46:51.760469       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1227040942/tls.crt::/tmp/serving-cert-1227040942/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777387611\" (2026-04-28 14:46:50 +0000 UTC to 2026-04-28 14:46:51 +0000 UTC (now=2026-04-28 14:46:51.760420598 +0000 UTC))"
I0428 14:46:51.760676       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-1227040942/tls.crt::/tmp/serving-cert-1227040942/tls.key"
I0428 14:46:51.760713       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777387611\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777387611\" (2026-04-28 13:46:51 +0000 UTC to 2029-04-28 13:46:51 +0000 UTC (now=2026-04-28 14:46:51.760692616 +0000 UTC))"
I0428 14:46:51.760731       1 secure_serving.go:211] Serving securely on [::]:8443
I0428 14:46:51.760756       1 genericapiserver.go:702] [graceful-termination] waiting for shutdown to be initiated
I0428 14:46:51.760773       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0428 14:46:51.761105       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I0428 14:46:51.764157       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0428 14:46:51.764365       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183"
I0428 14:46:51.764448       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0428 14:46:51.772352       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I0428 14:46:51.772375       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"688abb60-df3b-4dd3-a361-142a5509dbfb", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"24172", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-665bb775dc-qh5qm_adbb0d4a-cef3-4be0-9674-6319bd71ed8b became leader
I0428 14:46:51.782764       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I0428 14:46:51.782794       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I0428 14:46:51.782806       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I0428 14:46:51.782807       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I0428 14:46:51.782832       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined
I0428 14:46:51.783329       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I0428 14:46:51.783757       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I0428 14:46:51.783795       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources
I0428 14:46:51.784252       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I0428 14:46:51.785842       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.786172       1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0428 14:46:51.789581       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.789624       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.789639       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.792499       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.792521       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.792705       1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125"
I0428 14:46:51.793025       1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.795668       1 reflector.go:439] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.796126       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.804046       1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet=""
I0428 14:46:51.804075       1 features.go:195] "cluster feature gate: preview featureset not enabled" logger="features" feature="TrustManager"
I0428 14:46:51.804084       1 setup_manager.go:121] "setting up unified operator manager" logger="setup-manager"
I0428 14:46:51.804093       1 setup_manager.go:122] "controller" logger="setup-manager" version=""
I0428 14:46:51.804103       1 setup_manager.go:123] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false
I0428 14:46:51.806255       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.806256       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.807037       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.811065       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 14:46:51.831908       1 setup_manager.go:156] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller"
I0428 14:46:51.832015       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I0428 14:46:51.832141       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I0428 14:46:51.832302       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I0428 14:46:51.832305       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I0428 14:46:51.832315       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I0428 14:46:51.832317       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I0428 14:46:51.832323       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy"
I0428 14:46:51.832335       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer"
I0428 14:46:51.832389       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I0428 14:46:51.832435       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I0428 14:46:51.832522       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer"
I0428 14:46:51.832555       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I0428 14:46:51.832574       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap"
I0428 14:46:51.832614       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I0428 14:46:51.832623       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I0428 14:46:51.832627       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I0428 14:46:51.843455       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.843455       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.852272       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.852272       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.852295       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.852717       1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.860502       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0428 14:46:51.860519       1 shared_informer.go:356] "Caches are synced" controller="RequestHeaderAuthRequestController"
I0428 14:46:51.860587       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0428 14:46:51.860676       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:30 +0000 UTC to 2036-04-25 14:18:30 +0000 UTC (now=2026-04-28 14:46:51.860656626 +0000 UTC))"
I0428 14:46:51.860837       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1227040942/tls.crt::/tmp/serving-cert-1227040942/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777387611\" (2026-04-28 14:46:50 +0000 UTC to 2026-04-28 14:46:51 +0000 UTC (now=2026-04-28 14:46:51.860828363 +0000 UTC))"
I0428 14:46:51.860927       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.860987       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777387611\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777387611\" (2026-04-28 13:46:51 +0000 UTC to 2029-04-28 13:46:51 +0000 UTC (now=2026-04-28 14:46:51.860978469 +0000 UTC))"
I0428 14:46:51.861098       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:31 +0000 UTC to 2036-04-25 14:18:31 +0000 UTC (now=2026-04-28 14:46:51.861090136 +0000 UTC))"
I0428 14:46:51.861111       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:33 +0000 UTC to 2036-04-25 14:18:33 +0000 UTC (now=2026-04-28 14:46:51.86110542 +0000 UTC))"
I0428 14:46:51.861119       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:33 +0000 UTC to 2036-04-25 14:18:33 +0000 UTC (now=2026-04-28 14:46:51.861114142 +0000 UTC))"
I0428 14:46:51.861130       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:34 +0000 UTC to 2036-04-25 14:18:34 +0000 UTC (now=2026-04-28 14:46:51.861125609 +0000 UTC))"
I0428 14:46:51.861141       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:34 +0000 UTC to 2036-04-25 14:18:34 +0000 UTC (now=2026-04-28 14:46:51.861136238 +0000 UTC))"
I0428 14:46:51.861152       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pv74j5ecf3kkb8aigsfqi4gnijjr2p5-kx-6c298adaf2_customer-system-admin-signer@1777385925\" [] issuer=\"<self>\" (2026-04-28 14:18:44 +0000 UTC to 2026-05-05 14:18:45 +0000 UTC (now=2026-04-28 14:46:51.861145537 +0000 UTC))"
I0428 14:46:51.861169       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2pv74j5ecf3kkb8aigsfqi4gnijjr2p5-kx-6c298adaf2_sre-system-admin-signer@1777385925\" [] issuer=\"<self>\" (2026-04-28 14:18:44 +0000 UTC to 2026-05-05 14:18:45 +0000 UTC (now=2026-04-28 14:46:51.861158422 +0000 UTC))"
I0428 14:46:51.861180       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-28 14:18:30 +0000 UTC to 2036-04-25 14:18:30 +0000 UTC (now=2026-04-28 14:46:51.861175391 +0000 UTC))"
I0428 14:46:51.861299       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-1227040942/tls.crt::/tmp/serving-cert-1227040942/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777387611\" (2026-04-28 14:46:50 +0000 UTC to 2026-04-28 14:46:51 +0000 UTC (now=2026-04-28 14:46:51.86129242 +0000 UTC))"
I0428 14:46:51.861416       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777387611\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777387611\" (2026-04-28 13:46:51 +0000 UTC to 2029-04-28 13:46:51 +0000 UTC (now=2026-04-28 14:46:51.861409026 +0000 UTC))"
I0428 14:46:51.866549       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.866792       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.866857       1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.866995       1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.883565       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
I0428 14:46:51.883584       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I0428 14:46:51.883610       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
I0428 14:46:51.883612       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I0428 14:46:51.883572       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I0428 14:46:51.883612       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined 
I0428 14:46:51.883626       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
I0428 14:46:51.883636       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ...
I0428 14:46:51.883683       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I0428 14:46:51.883690       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I0428 14:46:51.883701       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I0428 14:46:51.883693       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
E0428 14:46:51.883711       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0428 14:46:51.883801       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I0428 14:46:51.883811       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
I0428 14:46:51.883818       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager
I0428 14:46:51.883838       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources 
I0428 14:46:51.883848       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ...
E0428 14:46:51.883856       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.883891       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0428 14:46:51.884954       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I0428 14:46:51.884963       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
E0428 14:46:51.885001       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.889182       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.890262       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.890274       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.890288       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0428 14:46:51.891353       1 reflector.go:439] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
E0428 14:46:51.891936       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.891972       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.891991       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.899462       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.900503       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.901587       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0428 14:46:51.901607       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0428 14:46:51.975222       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I0428 14:46:51.975283       1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:51.975327       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0428 14:46:52.051844       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0428 14:46:52.181731       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0428 14:46:52.189864       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I0428 14:46:52.198565       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0428 14:46:52.220638       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing
I0428 14:46:52.234001       1 controller.go:286] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I0428 14:46:52.234026       1 controller.go:289] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I0428 14:46:52.259930       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I0428 14:46:53.032736       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0428 14:46:53.052780       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I0428 14:46:53.445787       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I0428 14:46:53.593374       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0428 14:46:53.627235       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0428 14:46:54.040643       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0428 14:46:54.396701       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found
I0428 14:46:54.836379       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
E0428 14:46:55.236932       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-deployment reconciliation failed: Operation cannot be fulfilled on certmanagers.operator.openshift.io \"cluster\": the object has been modified; please apply your changes to the latest version and try again"
I0428 14:46:55.578483       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0428 14:46:55.652555       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I0428 14:46:55.913808       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0428 14:46:55.967636       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I0428 14:46:55.983882       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I0428 14:46:56.151445       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
I0428 14:46:56.339694       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0428 14:46:56.727310       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0428 14:46:56.901447       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0428 14:46:57.076887       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0428 14:46:57.184271       1 request.go:752] "Waited before sending request" delay="1.032785638s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:46:57.602693       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
E0428 14:46:57.829521       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I0428 14:46:58.047987       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0428 14:46:58.322125       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0428 14:46:58.384265       1 request.go:752] "Waited before sending request" delay="1.185214296s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true"
E0428 14:46:58.403773       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found"
I0428 14:46:58.900641       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0428 14:47:00.033258       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0428 14:47:00.643446       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0428 14:47:00.836801       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0428 14:47:01.527450       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0428 14:47:01.836257       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing
I0428 14:47:02.184157       1 request.go:752] "Waited before sending request" delay="1.157783964s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:02.590588       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found
I0428 14:47:03.431729       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0428 14:47:03.449017       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I0428 14:47:03.472636       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
I0428 14:47:04.189444       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I0428 14:47:05.005549       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0428 14:47:05.013200       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0428 14:47:05.018148       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"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","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0428 14:47:05.026131       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0428 14:47:05.033737       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0428 14:47:05.818980       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing
I0428 14:47:05.984736       1 request.go:752] "Waited before sending request" delay="1.18879653s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:06.625296       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0428 14:47:07.118031       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0428 14:47:07.584264       1 request.go:752] "Waited before sending request" delay="1.192058s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:07.831401       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0428 14:47:08.849839       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0428 14:47:09.584827       1 request.go:752] "Waited before sending request" delay="1.188899676s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:10.784837       1 request.go:752] "Waited before sending request" delay="1.133377096s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-static-resources--StaticResources&force=true"
E0428 14:47:11.011714       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]"
I0428 14:47:11.984507       1 request.go:752] "Waited before sending request" delay="1.137117336s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:15.033787       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0428 14:47:16.232984       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"4e6086bb-7a75-4205-8aff-b29cdb6977bd", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0428 14:47:21.183930       1 request.go:752] "Waited before sending request" delay="1.064141485s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:28.184189       1 request.go:752] "Waited before sending request" delay="1.192361732s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-deployment-Deployment&force=true"
I0428 14:47:29.184448       1 request.go:752] "Waited before sending request" delay="1.188965827s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true"
I0428 14:47:39.210925       1 request.go:752] "Waited before sending request" delay="1.122120017s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:47:40.410666       1 request.go:752] "Waited before sending request" delay="1.183134725s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0428 14:47:54.430894       1 request.go:752] "Waited before sending request" delay="1.034079985s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:53:53.293935       1 request.go:752] "Waited before sending request" delay="1.180949344s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 14:56:53.793349       1 request.go:752] "Waited before sending request" delay="1.193115838s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:06:53.594371       1 request.go:752] "Waited before sending request" delay="1.192798731s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:16:53.422886       1 request.go:752] "Waited before sending request" delay="1.018385929s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:16:54.621841       1 request.go:752] "Waited before sending request" delay="1.190965976s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0428 15:26:53.802985       1 request.go:752] "Waited before sending request" delay="1.17884653s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:36:55.196512       1 request.go:752] "Waited before sending request" delay="1.130870413s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:46:53.596805       1 request.go:752] "Waited before sending request" delay="1.14903243s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:46:54.597559       1 request.go:752] "Waited before sending request" delay="1.194268341s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0428 15:56:53.599285       1 request.go:752] "Waited before sending request" delay="1.176519477s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 15:56:54.599287       1 request.go:752] "Waited before sending request" delay="1.194867796s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0428 16:06:53.796430       1 request.go:752] "Waited before sending request" delay="1.192121816s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 16:13:31.211189       1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0428 16:13:31.528071       1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0428 16:16:53.405438       1 request.go:752] "Waited before sending request" delay="1.173143719s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0428 16:16:54.405915       1 request.go:752] "Waited before sending request" delay="1.192675557s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
I0428 16:26:53.802805       1 request.go:752] "Waited before sending request" delay="1.164380083s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"