W0424 05:09:29.761150       1 cmd.go:257] Using insecure, self-signed certificates
I0424 05:09:29.761240       1 crypto.go:600] Generating new CA for cert-manager-operator-signer@1777007369 cert, and key in /tmp/serving-cert-2485034987/serving-signer.crt, /tmp/serving-cert-2485034987/serving-signer.key
Validity period of the certificate for "cert-manager-operator-signer@1777007369" is unset, resetting to 43800h0m0s!
I0424 05:09:29.886987       1 leaderelection.go:121] The leader election gives 4 retries and allows for 30s of clock skew. The kube-apiserver downtime tolerance is 78s. Worst non-graceful lease acquisition is 2m43s. Worst graceful lease acquisition is {26s}.
I0424 05:09:29.887158       1 observer_polling.go:159] Starting file observer
I0424 05:09:29.908171       1 builder.go:304] cert-manager-operator version -
I0424 05:09:29.909723       1 dynamic_serving_content.go:116] "Loaded a new cert/key pair" name="serving-cert::/tmp/serving-cert-2485034987/tls.crt::/tmp/serving-cert-2485034987/tls.key"
I0424 05:09:30.026767       1 requestheader_controller.go:255] Loaded a new request header values for RequestHeaderAuthRequestController
I0424 05:09:30.035017       1 maxinflight.go:139] "Initialized nonMutatingChan" len=400
I0424 05:09:30.035029       1 maxinflight.go:145] "Initialized mutatingChan" len=200
I0424 05:09:30.035043       1 maxinflight.go:116] "Set denominator for readonly requests" limit=400
I0424 05:09:30.035047       1 maxinflight.go:120] "Set denominator for mutating requests" limit=200
I0424 05:09:30.037420       1 secure_serving.go:57] Forcing use of http/1.1 only
I0424 05:09:30.037431       1 genericapiserver.go:552] MuxAndDiscoveryComplete has all endpoints registered and discovery information is complete
I0424 05:09:30.044317       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 05:09:30.044318       1 configmap_cafile_content.go:205] "Starting controller" name="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 05:09:30.044299       1 requestheader_controller.go:180] Starting RequestHeaderAuthRequestController
I0424 05:09:30.044354       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 05:09:30.044353       1 shared_informer.go:349] "Waiting for caches to sync" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 05:09:30.044353       1 shared_informer.go:349] "Waiting for caches to sync" controller="RequestHeaderAuthRequestController"
I0424 05:09:30.044597       1 dynamic_serving_content.go:135] "Starting controller" name="serving-cert::/tmp/serving-cert-2485034987/tls.crt::/tmp/serving-cert-2485034987/tls.key"
I0424 05:09:30.044625       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2485034987/tls.crt::/tmp/serving-cert-2485034987/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777007369\" (2026-04-24 05:09:28 +0000 UTC to 2026-04-24 05:09:29 +0000 UTC (now=2026-04-24 05:09:30.044604782 +0000 UTC))"
I0424 05:09:30.044773       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777007370\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777007369\" (2026-04-24 04:09:29 +0000 UTC to 2029-04-24 04:09:29 +0000 UTC (now=2026-04-24 05:09:30.044761946 +0000 UTC))"
I0424 05:09:30.044795       1 secure_serving.go:211] Serving securely on [::]:8443
I0424 05:09:30.044810       1 tlsconfig.go:243] "Starting DynamicServingCertificateController"
I0424 05:09:30.044818       1 genericapiserver.go:702] [graceful-termination] waiting for shutdown to be initiated
I0424 05:09:30.047791       1 leaderelection.go:257] attempting to acquire leader lease cert-manager-operator/cert-manager-operator-lock...
I0424 05:09:30.051395       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/authentication/request/headerrequest/requestheader_controller.go:183"
I0424 05:09:30.051638       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0424 05:09:30.051678       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/apiserver/pkg/server/dynamiccertificates/configmap_cafile_content.go:209"
I0424 05:09:30.063061       1 leaderelection.go:271] successfully acquired lease cert-manager-operator/cert-manager-operator-lock
I0424 05:09:30.063107       1 event.go:377] Event(v1.ObjectReference{Kind:"Lease", Namespace:"cert-manager-operator", Name:"cert-manager-operator-lock", UID:"5b6406c7-4155-4f59-abdf-6bd8b3b8888f", APIVersion:"coordination.k8s.io/v1", ResourceVersion:"26307", FieldPath:""}): type: 'Normal' reason: 'LeaderElection' cert-manager-operator-controller-manager-665bb775dc-fdq2l_f13e2db0-ec23-4c5d-bc45-462fd52d302a became leader
I0424 05:09:30.079110       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-deployment
I0424 05:09:30.079500       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-deployment
I0424 05:09:30.079594       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-deployment
I0424 05:09:30.079607       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-user-defined
I0424 05:09:30.079852       1 base_controller.go:76] Waiting for caches to sync for DefaultCertManager
I0424 05:09:30.079967       1 base_controller.go:76] Waiting for caches to sync for cert-manager-cainjector-static-resources--StaticResources
I0424 05:09:30.079984       1 base_controller.go:76] Waiting for caches to sync for cert-manager-networkpolicy-static-resources--StaticResources
I0424 05:09:30.080123       1 base_controller.go:76] Waiting for caches to sync for cert-manager-controller-static-resources--StaticResources
I0424 05:09:30.080810       1 base_controller.go:76] Waiting for caches to sync for cert-manager-webhook-static-resources--StaticResources
I0424 05:09:30.085203       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.085378       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.085440       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.085677       1 reflector.go:439] "Caches populated" type="*v1.Infrastructure" reflector="github.com/openshift/client-go/config/informers/externalversions/factory.go:125"
I0424 05:09:30.085873       1 reflector.go:439] "Caches populated" type="*v1alpha1.CertManager" reflector="github.com/openshift/cert-manager-operator/pkg/operator/informers/externalversions/factory.go:125"
I0424 05:09:30.088118       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.088134       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.088158       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.088194       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.088240       1 reflector.go:439] "Caches populated" type="*v1.Secret" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.090040       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.091620       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.096280       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.097113       1 reflector.go:439] "Caches populated" type="*v1.Namespace" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.103302       1 features.go:133] "cluster featureset: spec.featureSet not in allowed list" logger="features" featureSet=""
I0424 05:09:30.103318       1 features.go:195] "cluster feature gate: preview featureset not enabled" logger="features" feature="TrustManager"
I0424 05:09:30.103323       1 setup_manager.go:121] "setting up unified operator manager" logger="setup-manager"
I0424 05:09:30.103331       1 setup_manager.go:122] "controller" logger="setup-manager" version=""
I0424 05:09:30.103336       1 setup_manager.go:123] "enabled controllers" logger="setup-manager" istioCSR=true trustManager=false
I0424 05:09:30.105485       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="k8s.io/client-go/informers/factory.go:160"
I0424 05:09:30.120508       1 setup_manager.go:156] "setting up controller" logger="setup-manager" name="cert-manager-istio-csr-controller"
I0424 05:09:30.120586       1 server.go:208] "Starting metrics server" logger="controller-runtime.metrics"
I0424 05:09:30.120676       1 server.go:247] "Serving metrics server" logger="controller-runtime.metrics" bindAddress=":8080" secure=false
I0424 05:09:30.120779       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1alpha1.IstioCSR"
I0424 05:09:30.120787       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterIssuer"
I0424 05:09:30.120797       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Deployment"
I0424 05:09:30.120805       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.PartialObjectMetadata"
I0424 05:09:30.120827       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.NetworkPolicy"
I0424 05:09:30.120832       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Service"
I0424 05:09:30.120827       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ConfigMap"
I0424 05:09:30.120862       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ServiceAccount"
I0424 05:09:30.120870       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Role"
I0424 05:09:30.120887       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.RoleBinding"
I0424 05:09:30.120891       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Issuer"
I0424 05:09:30.120909       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRole"
I0424 05:09:30.120925       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.ClusterRoleBinding"
I0424 05:09:30.120954       1 controller.go:353] "Starting EventSource" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" source="kind source: *v1.Certificate"
I0424 05:09:30.126073       1 reflector.go:439] "Caches populated" type="*v1.Service" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.126096       1 reflector.go:439] "Caches populated" type="*v1.Deployment" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.126313       1 reflector.go:439] "Caches populated" type="*v1.Certificate" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.128987       1 reflector.go:439] "Caches populated" type="*v1.RoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.129030       1 reflector.go:439] "Caches populated" type="*v1.ClusterRoleBinding" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.129053       1 reflector.go:439] "Caches populated" type="*v1.NetworkPolicy" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.128987       1 reflector.go:439] "Caches populated" type="*v1.ServiceAccount" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.129483       1 reflector.go:439] "Caches populated" type="*v1.Issuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.132112       1 reflector.go:439] "Caches populated" type="*v1.ClusterRole" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.135227       1 reflector.go:439] "Caches populated" type="*v1.ClusterIssuer" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.135334       1 reflector.go:439] "Caches populated" type="*v1alpha1.IstioCSR" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.135473       1 reflector.go:439] "Caches populated" type="*v1.Role" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.145096       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::client-ca-file"
I0424 05:09:30.145102       1 shared_informer.go:356] "Caches are synced" controller="client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file"
I0424 05:09:30.145160       1 shared_informer.go:356] "Caches are synced" controller="RequestHeaderAuthRequestController"
I0424 05:09:30.145286       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:33 +0000 UTC to 2036-04-21 04:37:33 +0000 UTC (now=2026-04-24 05:09:30.145257888 +0000 UTC))"
I0424 05:09:30.145554       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2485034987/tls.crt::/tmp/serving-cert-2485034987/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777007369\" (2026-04-24 05:09:28 +0000 UTC to 2026-04-24 05:09:29 +0000 UTC (now=2026-04-24 05:09:30.145539653 +0000 UTC))"
I0424 05:09:30.145681       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777007370\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777007369\" (2026-04-24 04:09:29 +0000 UTC to 2029-04-24 04:09:29 +0000 UTC (now=2026-04-24 05:09:30.145671945 +0000 UTC))"
I0424 05:09:30.145778       1 tlsconfig.go:181] "Loaded client CA" index=0 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-control-plane-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:33 +0000 UTC to 2036-04-21 04:37:33 +0000 UTC (now=2026-04-24 05:09:30.145767101 +0000 UTC))"
I0424 05:09:30.145792       1 tlsconfig.go:181] "Loaded client CA" index=1 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-apiserver-to-kubelet-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:34 +0000 UTC to 2036-04-21 04:37:34 +0000 UTC (now=2026-04-24 05:09:30.145785581 +0000 UTC))"
I0424 05:09:30.145803       1 tlsconfig.go:181] "Loaded client CA" index=2 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"admin-kubeconfig-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:35 +0000 UTC to 2036-04-21 04:37:35 +0000 UTC (now=2026-04-24 05:09:30.145795607 +0000 UTC))"
I0424 05:09:30.145815       1 tlsconfig.go:181] "Loaded client CA" index=3 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"hcco-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:35 +0000 UTC to 2036-04-21 04:37:35 +0000 UTC (now=2026-04-24 05:09:30.145809668 +0000 UTC))"
I0424 05:09:30.145824       1 tlsconfig.go:181] "Loaded client CA" index=4 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"kube-csr-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:36 +0000 UTC to 2036-04-21 04:37:36 +0000 UTC (now=2026-04-24 05:09:30.145818466 +0000 UTC))"
I0424 05:09:30.145834       1 tlsconfig.go:181] "Loaded client CA" index=5 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2psa8q6jnm2u7umno2e0c4f1kcs54tqi-kx-3456f388c1_customer-system-admin-signer@1777005467\" [] issuer=\"<self>\" (2026-04-24 04:37:46 +0000 UTC to 2026-05-01 04:37:47 +0000 UTC (now=2026-04-24 05:09:30.145828149 +0000 UTC))"
I0424 05:09:30.145844       1 tlsconfig.go:181] "Loaded client CA" index=6 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"ocm-production-2psa8q6jnm2u7umno2e0c4f1kcs54tqi-kx-3456f388c1_sre-system-admin-signer@1777005467\" [] issuer=\"<self>\" (2026-04-24 04:37:46 +0000 UTC to 2026-05-01 04:37:47 +0000 UTC (now=2026-04-24 05:09:30.145837762 +0000 UTC))"
I0424 05:09:30.145855       1 tlsconfig.go:181] "Loaded client CA" index=7 certName="client-ca::kube-system::extension-apiserver-authentication::client-ca-file,client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file" certDetail="\"aggregator-signer\" [] issuer=\"<self>\" (2026-04-24 04:37:33 +0000 UTC to 2036-04-21 04:37:33 +0000 UTC (now=2026-04-24 05:09:30.145849952 +0000 UTC))"
I0424 05:09:30.145971       1 tlsconfig.go:203] "Loaded serving cert" certName="serving-cert::/tmp/serving-cert-2485034987/tls.crt::/tmp/serving-cert-2485034987/tls.key" certDetail="\"localhost\" [serving] validServingFor=[localhost] issuer=\"cert-manager-operator-signer@1777007369\" (2026-04-24 05:09:28 +0000 UTC to 2026-04-24 05:09:29 +0000 UTC (now=2026-04-24 05:09:30.145965285 +0000 UTC))"
I0424 05:09:30.146102       1 named_certificates.go:53] "Loaded SNI cert" index=0 certName="self-signed loopback" certDetail="\"apiserver-loopback-client@1777007370\" [serving] validServingFor=[apiserver-loopback-client] issuer=\"apiserver-loopback-client-ca@1777007369\" (2026-04-24 04:09:29 +0000 UTC to 2029-04-24 04:09:29 +0000 UTC (now=2026-04-24 05:09:30.146090182 +0000 UTC))"
I0424 05:09:30.161056       1 reflector.go:439] "Caches populated" type="*v1.PartialObjectMetadata" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.179596       1 base_controller.go:82] Caches are synced for cert-manager-controller-deployment 
I0424 05:09:30.179610       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-deployment controller ...
I0424 05:09:30.179610       1 base_controller.go:82] Caches are synced for cert-manager-webhook-deployment 
I0424 05:09:30.179621       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-deployment controller ...
I0424 05:09:30.179707       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-deployment 
I0424 05:09:30.179714       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-deployment controller ...
I0424 05:09:30.179718       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-user-defined 
I0424 05:09:30.179735       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-user-defined controller ...
I0424 05:09:30.180011       1 base_controller.go:82] Caches are synced for DefaultCertManager 
I0424 05:09:30.180021       1 base_controller.go:82] Caches are synced for cert-manager-cainjector-static-resources--StaticResources 
I0424 05:09:30.180030       1 base_controller.go:119] Starting #1 worker of cert-manager-cainjector-static-resources--StaticResources controller ...
I0424 05:09:30.180024       1 base_controller.go:119] Starting #1 worker of DefaultCertManager controller ...
E0424 05:09:30.180097       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0424 05:09:30.180236       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'StatusNotFound' Creating "cluster" certmanager
I0424 05:09:30.180243       1 base_controller.go:82] Caches are synced for cert-manager-networkpolicy-static-resources--StaticResources 
I0424 05:09:30.180282       1 base_controller.go:119] Starting #1 worker of cert-manager-networkpolicy-static-resources--StaticResources controller ...
I0424 05:09:30.180283       1 base_controller.go:82] Caches are synced for cert-manager-controller-static-resources--StaticResources 
I0424 05:09:30.180331       1 base_controller.go:119] Starting #1 worker of cert-manager-controller-static-resources--StaticResources controller ...
E0424 05:09:30.180415       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 05:09:30.180434       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0424 05:09:30.181245       1 base_controller.go:82] Caches are synced for cert-manager-webhook-static-resources--StaticResources 
I0424 05:09:30.181259       1 base_controller.go:119] Starting #1 worker of cert-manager-webhook-static-resources--StaticResources controller ...
E0424 05:09:30.181300       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 05:09:30.186060       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 05:09:30.187134       1 base_controller.go:279] "Unhandled Error" err="cert-manager-networkpolicy-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 05:09:30.187147       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
E0424 05:09:30.187150       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: certmanager.operator.openshift.io \"cluster\" not found"
I0424 05:09:30.208819       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'NamespaceCreated' Created Namespace/cert-manager because it was missing
I0424 05:09:30.231154       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationCreated' Created MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0424 05:09:30.266208       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationCreated' Created ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it was missing
I0424 05:09:30.342502       1 reflector.go:439] "Caches populated" type="*v1.ConfigMap" reflector="sigs.k8s.io/controller-runtime/pkg/cache/internal/informers.go:114"
I0424 05:09:30.350071       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0424 05:09:30.421134       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-cluster-view because it was missing
I0424 05:09:30.422564       1 controller.go:286] "Starting Controller" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR"
I0424 05:09:30.422586       1 controller.go:289] "Starting workers" logger="operator-manager" controller="cert-manager-istio-csr-controller" controllerGroup="operator.openshift.io" controllerKind="IstioCSR" worker count=1
I0424 05:09:30.488786       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-webhook:dynamic-serving" not found
I0424 05:09:30.543383       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-webhook -n cert-manager because it was missing
I0424 05:09:31.321843       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector because it was missing
I0424 05:09:31.537898       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager -n cert-manager because it was missing
I0424 05:09:31.554335       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0424 05:09:31.812419       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0424 05:09:31.834149       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-webhook -n cert-manager because it was missing
I0424 05:09:32.566462       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager-cainjector:leaderelection" not found
I0424 05:09:33.188313       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'DeploymentCreated' Created Deployment.apps/cert-manager-cainjector -n cert-manager because it was missing
I0424 05:09:33.264733       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificates because it was missing
I0424 05:09:33.318979       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0424 05:09:33.505801       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0424 05:09:33.549525       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager-cainjector -n cert-manager because it was missing
I0424 05:09:33.629444       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-cainjector -n cert-manager because it was missing
I0424 05:09:34.038051       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0424 05:09:34.188335       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews because it was missing
I0424 05:09:34.229293       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager-webhook -n cert-manager because it was missing
I0424 05:09:34.526530       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-challenges because it was missing
I0424 05:09:34.946335       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
I0424 05:09:35.280088       1 request.go:752] "Waited before sending request" delay="1.05074122s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:09:35.328488       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers because it was missing
E0424 05:09:35.694505       1 base_controller.go:279] "Unhandled Error" err="cert-manager-cainjector-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/cainjector/cert-manager-cainjector-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-cainjector:leaderelection\" not found"
I0424 05:09:35.720852       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0424 05:09:36.479529       1 request.go:752] "Waited before sending request" delay="1.190729607s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-static-resources--StaticResources&force=true"
E0424 05:09:36.541994       1 base_controller.go:279] "Unhandled Error" err="cert-manager-webhook-static-resources--StaticResources reconciliation failed: \"cert-manager-deployment/webhook/cert-manager-webhook-dynamic-serving-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-webhook:dynamic-serving\" not found"
I0424 05:09:36.676200       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim because it was missing
I0424 05:09:37.373132       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection -n kube-system because it was missing
I0424 05:09:37.582332       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving -n cert-manager because it was missing
I0424 05:09:37.731221       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0424 05:09:38.740371       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-issuers because it was missing
I0424 05:09:39.391057       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0424 05:09:39.778169       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-orders because it was missing
I0424 05:09:40.080051       1 request.go:752] "Waited before sending request" delay="1.185628459s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:09:40.152305       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-edit because it was missing
I0424 05:09:40.917817       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system: roles.rbac.authorization.k8s.io "cert-manager:leaderelection" not found
I0424 05:09:41.967209       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0424 05:09:41.986140       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceAccountCreated' Created ServiceAccount/cert-manager -n cert-manager because it was missing
I0424 05:09:42.013344       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ServiceCreated' Created Service/cert-manager -n cert-manager because it was missing
I0424 05:09:42.687515       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Warning' reason: 'RoleBindingCreateFailed' Failed to create RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager: roles.rbac.authorization.k8s.io "cert-manager-tokenrequest" not found
I0424 05:09:43.354561       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleCreated' Created Role.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0424 05:09:43.739469       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-view because it was missing
I0424 05:09:44.079355       1 request.go:752] "Waited before sending request" delay="1.171958182s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:09:44.519490       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0424 05:09:45.529962       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io because it was missing
I0424 05:09:46.519217       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleCreated' Created ClusterRole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0424 05:09:47.413520       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ClusterRoleBindingCreated' Created ClusterRoleBinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests because it was missing
I0424 05:09:48.480067       1 request.go:752] "Waited before sending request" delay="1.066537766s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:09:49.680396       1 request.go:752] "Waited before sending request" delay="1.192950746s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-controller-static-resources--StaticResources&force=true"
E0424 05:09:49.695684       1 base_controller.go:279] "Unhandled Error" err="cert-manager-controller-static-resources--StaticResources reconciliation failed: [\"cert-manager-deployment/controller/cert-manager-leaderelection-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager:leaderelection\" not found, \"cert-manager-deployment/controller/cert-manager-tokenrequest-rb.yaml\" (string): roles.rbac.authorization.k8s.io \"cert-manager-tokenrequest\" not found]"
I0424 05:09:50.879767       1 request.go:752] "Waited before sending request" delay="1.393841947s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-cainjector-deployment-Deployment&force=true"
I0424 05:09:53.152802       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager:leaderelection -n kube-system because it was missing
I0424 05:09:54.051774       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'RoleBindingCreated' Created RoleBinding.rbac.authorization.k8s.io/cert-manager-tokenrequest -n cert-manager because it was missing
I0424 05:09:57.879663       1 request.go:752] "Waited before sending request" delay="1.113195329s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:09:59.279864       1 request.go:752] "Waited before sending request" delay="1.150760498s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:10:03.931299       1 admissionregistration.go:69] MutatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ4RENDQVV1Z0F3SUJBZ0lVU1dZVi83Zk1Zd1hud2FOMVZMQTdMUWdRM3lVd0NnWUlLb1pJemowRUF3TXcKSWpFZ01CNEdBMVVFQXhNWFkyVnlkQzF0WVc1aFoyVnlMWGRsWW1odmIyc3RZMkV3SGhjTk1qWXdOREkwTURVdwpPVE00V2hjTk1qY3dOREkwTURVd09UTTRXakFpTVNBd0hnWURWUVFERXhkalpYSjBMVzFoYm1GblpYSXRkMlZpCmFHOXZheTFqWVRCMk1CQUdCeXFHU000OUFnRUdCU3VCQkFBaUEySUFCR2s5LzBsRXFCYUs2d1hXdXNQL3llUFoKSFJ3b21Zbzd5eXdJRWZUbGNHcW1GVzhJRjVnNWwrcXI5aEQwZDlzZ3lzR1pOSlRDSVVIY09GZnprMDdhUGdNTApkMXJRRVJ1aHN3eU9hc2xSTVZOOEdjTDNzMGxNK3RUOUVCN0lPRUxXKzZOQ01FQXdEZ1lEVlIwUEFRSC9CQVFECkFnS2tNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGSkNaWHRDMktsZThMT2Rkczl6R2ZVZzgKMjhoSE1Bb0dDQ3FHU000OUJBTURBMmNBTUdRQ01FVXJvM0c1NVBWTDlaeUtWTGJhMjFRcmFiMWZzVi9nSEdKQgpmUU1oOHA0SnlqVVZIbUpUZmdyVkpKeFpUQ1pKU1FJd1lzVHY4dkg5Z3A2dWowQ3N6cU9LSWxvTldBUHlSU2tBClpGUXlXLzh5RVUwaVJVM0JBeVE1K1lqTkx2L0dibkovCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/mutate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","rules":[{"apiGroups":["cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE"],"resources":["certificaterequests"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0424 05:10:03.940026       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'MutatingWebhookConfigurationUpdated' Updated MutatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0424 05:10:03.947353       1 admissionregistration.go:144] ValidatingWebhookConfiguration "/cert-manager-webhook" changes: {"webhooks":[{"admissionReviewVersions":["v1"],"clientConfig":{"caBundle":"LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJ4RENDQVV1Z0F3SUJBZ0lVU1dZVi83Zk1Zd1hud2FOMVZMQTdMUWdRM3lVd0NnWUlLb1pJemowRUF3TXcKSWpFZ01CNEdBMVVFQXhNWFkyVnlkQzF0WVc1aFoyVnlMWGRsWW1odmIyc3RZMkV3SGhjTk1qWXdOREkwTURVdwpPVE00V2hjTk1qY3dOREkwTURVd09UTTRXakFpTVNBd0hnWURWUVFERXhkalpYSjBMVzFoYm1GblpYSXRkMlZpCmFHOXZheTFqWVRCMk1CQUdCeXFHU000OUFnRUdCU3VCQkFBaUEySUFCR2s5LzBsRXFCYUs2d1hXdXNQL3llUFoKSFJ3b21Zbzd5eXdJRWZUbGNHcW1GVzhJRjVnNWwrcXI5aEQwZDlzZ3lzR1pOSlRDSVVIY09GZnprMDdhUGdNTApkMXJRRVJ1aHN3eU9hc2xSTVZOOEdjTDNzMGxNK3RUOUVCN0lPRUxXKzZOQ01FQXdEZ1lEVlIwUEFRSC9CQVFECkFnS2tNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdIUVlEVlIwT0JCWUVGSkNaWHRDMktsZThMT2Rkczl6R2ZVZzgKMjhoSE1Bb0dDQ3FHU000OUJBTURBMmNBTUdRQ01FVXJvM0c1NVBWTDlaeUtWTGJhMjFRcmFiMWZzVi9nSEdKQgpmUU1oOHA0SnlqVVZIbUpUZmdyVkpKeFpUQ1pKU1FJd1lzVHY4dkg5Z3A2dWowQ3N6cU9LSWxvTldBUHlSU2tBClpGUXlXLzh5RVUwaVJVM0JBeVE1K1lqTkx2L0dibkovCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K","service":{"name":"cert-manager-webhook","namespace":"cert-manager","path":"/validate"}},"failurePolicy":"Fail","matchPolicy":"Equivalent","name":"webhook.cert-manager.io","namespaceSelector":{"matchExpressions":[{"key":"cert-manager.io/disable-validation","operator":"NotIn","values":["true"]}]},"rules":[{"apiGroups":["cert-manager.io","acme.cert-manager.io"],"apiVersions":["v1"],"operations":["CREATE","UPDATE"],"resources":["*/*"]}],"sideEffects":"None","timeoutSeconds":30}]}
I0424 05:10:03.957083       1 event.go:377] Event(v1.ObjectReference{Kind:"Deployment", Namespace:"cert-manager-operator", Name:"cert-manager-operator-controller-manager", UID:"6b032682-18a0-48fd-a25d-2ae656872d08", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'ValidatingWebhookConfigurationUpdated' Updated ValidatingWebhookConfiguration.admissionregistration.k8s.io/cert-manager-webhook because it changed
I0424 05:29:31.948232       1 request.go:752] "Waited before sending request" delay="1.115974103s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:29:33.547363       1 request.go:752] "Waited before sending request" delay="1.037831215s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:39:31.702056       1 request.go:752] "Waited before sending request" delay="1.002536519s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:39:32.702490       1 request.go:752] "Waited before sending request" delay="1.193617731s" reason="client-side throttling, not priority and fairness" verb="PATCH" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster/status?fieldManager=cert-manager-webhook-deployment-Deployment&force=true"
I0424 05:45:31.848163       1 request.go:752] "Waited before sending request" delay="1.036392977s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:45:32.848554       1 request.go:752] "Waited before sending request" delay="1.179898943s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 05:49:32.093929       1 request.go:752] "Waited before sending request" delay="1.180745283s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 06:09:32.092490       1 request.go:752] "Waited before sending request" delay="1.181452979s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 06:19:32.094248       1 request.go:752] "Waited before sending request" delay="1.178125635s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 06:21:31.839459       1 request.go:752] "Waited before sending request" delay="1.005928039s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 06:21:32.839888       1 request.go:752] "Waited before sending request" delay="1.182993941s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"
I0424 06:29:31.894445       1 request.go:752] "Waited before sending request" delay="1.177114942s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://172.30.0.1:443/apis/operator.openshift.io/v1alpha1/certmanagers/cluster"